| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | · | 1 | ·1aa4c136a7a5b0609abef8ccf4216fd5·153736·admin·optional·ssg-applications_0.1.76-1_all.deb |
| 2 | ·ea0c1f19113a8a6c0a6e8b10e8e208a9·32632·admin·optional·ssg-base_0.1.76-1_all.deb | 2 | ·ea0c1f19113a8a6c0a6e8b10e8e208a9·32632·admin·optional·ssg-base_0.1.76-1_all.deb |
| 3 | ·c7dfc640b245acb9bdc28d49c6b6b549·3725972·admin·optional·ssg-debderived_0.1.76-1_all.deb | ||
| 4 | ·83917f0318b3c7957d0282b375264374·1232376·admin·optional·ssg-debian_0.1.76-1_all.deb | ||
| 5 | · | 3 | ·86ae720ef5f72888c8a7d9f3ee8ce522·3723780·admin·optional·ssg-debderived_0.1.76-1_all.deb |
| 4 | ·ece3b922f54d9bccbb18523a385b9e0d·1230512·admin·optional·ssg-debian_0.1.76-1_all.deb | ||
| 5 | ·aa90344ae08f50701da2cee076145c3d·37093324·admin·optional·ssg-nondebian_0.1.76-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····172 | 2 | -rw-r--r--···0········0········0·····1728·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···1518 | 3 | -rw-r--r--···0········0········0···151816·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 1675, 15 lines modified | Offset 1675, 15 lines modified | ||
| 1675 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1675 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1676 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1676 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1677 | ··········</xccdf-1.2:check> | 1677 | ··········</xccdf-1.2:check> |
| 1678 | ········</xccdf-1.2:Rule> | 1678 | ········</xccdf-1.2:Rule> |
| 1679 | ······</xccdf-1.2:Group> | 1679 | ······</xccdf-1.2:Group> |
| 1680 | ····</xccdf-1.2:Benchmark> | 1680 | ····</xccdf-1.2:Benchmark> |
| 1681 | ··</ds:component> | 1681 | ··</ds:component> |
| 1682 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2025-0 | 1682 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 1683 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1683 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1684 | ······<oval-def:generator> | 1684 | ······<oval-def:generator> |
| 1685 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1685 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1686 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> | 1686 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> |
| 1687 | ········<oval:schema_version>5.11</oval:schema_version> | 1687 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1688 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 1688 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 1689 | ······</oval-def:generator> | 1689 | ······</oval-def:generator> |
| Offset 2539, 360 lines modified | Offset 2539, 360 lines modified | ||
| 2539 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2539 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2540 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2540 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2541 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2541 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2542 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2542 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2543 | ······</oval-def:variables> | 2543 | ······</oval-def:variables> |
| 2544 | ····</oval-def:oval_definitions> | 2544 | ····</oval-def:oval_definitions> |
| 2545 | ··</ds:component> | 2545 | ··</ds:component> |
| 2546 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2025-0 | 2546 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 2547 | ····<ocil:ocil> | 2547 | ····<ocil:ocil> |
| 2548 | ······<ocil:generator> | 2548 | ······<ocil:generator> |
| 2549 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2549 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2550 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 2550 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 2551 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2551 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2552 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 2552 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 2553 | ······</ocil:generator> | 2553 | ······</ocil:generator> |
| 2554 | ······<ocil:questionnaires> | 2554 | ······<ocil:questionnaires> |
| 2555 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2555 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> |
| 2556 | ··········<ocil:title> | 2556 | ··········<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> |
| 2557 | ··········<ocil:actions> | 2557 | ··········<ocil:actions> |
| 2558 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2558 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> |
| 2559 | ··········</ocil:actions> | 2559 | ··········</ocil:actions> |
| 2560 | ········</ocil:questionnaire> | 2560 | ········</ocil:questionnaire> |
| 2561 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2561 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 2562 | ··········<ocil:title> | 2562 | ··········<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 2563 | ··········<ocil:actions> | 2563 | ··········<ocil:actions> |
| 2564 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2564 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 2565 | ··········</ocil:actions> | 2565 | ··········</ocil:actions> |
| 2566 | ········</ocil:questionnaire> | 2566 | ········</ocil:questionnaire> |
| 2567 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2567 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 2568 | ··········<ocil:title> | 2568 | ··········<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 2569 | ··········<ocil:actions> | 2569 | ··········<ocil:actions> |
| 2570 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2570 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 2571 | ··········</ocil:actions> | 2571 | ··········</ocil:actions> |
| 2572 | ········</ocil:questionnaire> | 2572 | ········</ocil:questionnaire> |
| 2573 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2573 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 2574 | ··········<ocil:title> | 2574 | ··········<ocil:title>Disable·Background·Processing</ocil:title> |
| 2575 | ··········<ocil:actions> | 2575 | ··········<ocil:actions> |
| 2576 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2576 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 2577 | ··········</ocil:actions> | 2577 | ··········</ocil:actions> |
| 2578 | ········</ocil:questionnaire> | 2578 | ········</ocil:questionnaire> |
| 2579 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2579 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> |
| 2580 | ··········<ocil:title>Disable· | 2580 | ··········<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> |
| 2581 | ··········<ocil:actions> | 2581 | ··········<ocil:actions> |
| 2582 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2582 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> |
| 2583 | ··········</ocil:actions> | 2583 | ··········</ocil:actions> |
| 2584 | ········</ocil:questionnaire> | 2584 | ········</ocil:questionnaire> |
| 2585 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2585 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_popups_ocil:questionnaire:1"> |
| 2586 | ··········<ocil:title> | 2586 | ··········<ocil:title>Disable·Popups</ocil:title> |
| 2587 | ··········<ocil:actions> | 2587 | ··········<ocil:actions> |
| 2588 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2588 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_popups_action:testaction:1</ocil:test_action_ref> |
| 2589 | ··········</ocil:actions> | 2589 | ··········</ocil:actions> |
| 2590 | ········</ocil:questionnaire> | 2590 | ········</ocil:questionnaire> |
| 2591 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2591 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 2592 | ··········<ocil:title>Disable· | 2592 | ··········<ocil:title>Disable·Session·Cookies</ocil:title> |
| 2593 | ··········<ocil:actions> | 2593 | ··········<ocil:actions> |
| 2594 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2594 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 2595 | ··········</ocil:actions> | 2595 | ··········</ocil:actions> |
| 2596 | ········</ocil:questionnaire> | 2596 | ········</ocil:questionnaire> |
| 2597 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2597 | ········<ocil:questionnaire·id="ocil:ssg-chromium_check_cert_revocation_ocil:questionnaire:1"> |
| 2598 | ··········<ocil:title>Enable· | 2598 | ··········<ocil:title>Enable·Online·OCSP/CRL·Certificate·Checks</ocil:title> |
| 2599 | ··········<ocil:actions> | 2599 | ··········<ocil:actions> |
| 2600 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2600 | ············<ocil:test_action_ref>ocil:ssg-chromium_check_cert_revocation_action:testaction:1</ocil:test_action_ref> |
| 2601 | ··········</ocil:actions> | 2601 | ··········</ocil:actions> |
| 2602 | ········</ocil:questionnaire> | 2602 | ········</ocil:questionnaire> |
| 2603 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2603 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 2604 | ··········<ocil:title> | 2604 | ··········<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 2605 | ··········<ocil:actions> | 2605 | ··········<ocil:actions> |
| 2606 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2606 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 2607 | ··········</ocil:actions> | 2607 | ··········</ocil:actions> |
| 2608 | ········</ocil:questionnaire> | 2608 | ········</ocil:questionnaire> |
| 2609 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2609 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_cloud_print_sharing_ocil:questionnaire:1"> |
| 2610 | ··········<ocil:title>Disable·P | 2610 | ··········<ocil:title>Disable·Cloud·Print·Sharing</ocil:title> |
| 2611 | ··········<ocil:actions> | 2611 | ··········<ocil:actions> |
| 2612 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2612 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_cloud_print_sharing_action:testaction:1</ocil:test_action_ref> |
| 2613 | ··········</ocil:actions> | 2613 | ··········</ocil:actions> |
| 2614 | ········</ocil:questionnaire> | 2614 | ········</ocil:questionnaire> |
| 2615 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2615 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> |
| 2616 | ··········<ocil:title>Disable· | 2616 | ··········<ocil:title>Disable·3rd·Party·Cookies</ocil:title> |
| 2617 | ··········<ocil:actions> | 2617 | ··········<ocil:actions> |
| 2618 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2618 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> |
| 2619 | ··········</ocil:actions> | 2619 | ··········</ocil:actions> |
| 2620 | ········</ocil:questionnaire> | 2620 | ········</ocil:questionnaire> |
| 2621 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2621 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_search_suggestions_ocil:questionnaire:1"> |
| 2622 | ··········<ocil:title>Disable· | 2622 | ··········<ocil:title>Disable·Search·Suggestion</ocil:title> |
| 2623 | ··········<ocil:actions> | 2623 | ··········<ocil:actions> |
| 2624 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2624 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_search_suggestions_action:testaction:1</ocil:test_action_ref> |
| 2625 | ··········</ocil:actions> | 2625 | ··········</ocil:actions> |
| Max diff block lines reached; 68713/81299 bytes (84.52%) of diff not shown. | |||
| Offset 3, 351 lines modified | Offset 3, 351 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_safe_browsing_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Enable·the·Safe·Browsing·Feature</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_safe_browsing_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_protocol_schemas_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Insecure·And·Obsolete·Protocol·Schemas</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_protocol_schemas_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Background·Processing</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_3d_graphics_api_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Disable· | 35 | ······<ocil:title>Disable·the·3D·Graphics·APIs</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_3d_graphics_api_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_popups_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Disable·Popups</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_popups_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable· | 47 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_check_cert_revocation_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Enable· | 53 | ······<ocil:title>Enable·Online·OCSP/CRL·Certificate·Checks</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_check_cert_revocation_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_approved_plugins_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Only·Approved·Plugins</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_approved_plugins_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cloud_print_sharing_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·P | 65 | ······<ocil:title>Disable·Cloud·Print·Sharing</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_cloud_print_sharing_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_thirdparty_cookies_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 71 | ······<ocil:title>Disable·3rd·Party·Cookies</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_thirdparty_cookies_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_search_suggestions_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable· | 77 | ······<ocil:title>Disable·Search·Suggestion</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_search_suggestions_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Disable· | 89 | ······<ocil:title>Disable·Incognito·Mode</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_automatic_installation_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable· | 95 | ······<ocil:title>Disable·Automatic·Search·And·Installation·of·Plugins</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_automatic_installation_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_blacklist_extension_installation_ocil:questionnaire:1"> | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_blacklist_extension_installation_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·All·Extensions·by·Default</ocil:title> | 101 | ······<ocil:title>Disable·All·Extensions·by·Default</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_blacklist_extension_installation_action:testaction:1</ocil:test_action_ref> | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_blacklist_extension_installation_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 107 | ······<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_firewall_traversal_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disallow_location_tracking_ocil:questionnaire:1"> | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disallow_location_tracking_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·Location·Tracking</ocil:title> | 113 | ······<ocil:title>Disable·Location·Tracking</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disallow_location_tracking_action:testaction:1</ocil:test_action_ref> | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_disallow_location_tracking_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 124 | ····<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 127 | ········<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 128 | ······</ocil:actions> | 128 | ······</ocil:actions> |
| 129 | ····</ocil:questionnaire> | 129 | ····</ocil:questionnaire> |
| Max diff block lines reached; 59870/72466 bytes (82.62%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 113, 24 lines modified | Offset 113, 24 lines modified | ||
| 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 119 | ······<cpe-lang:platform-specification> | 119 | ······<cpe-lang:platform-specification> |
| 120 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | ||
| 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 123 | ··········</cpe-lang:logical-test> | ||
| 124 | ········</cpe-lang:platform> | ||
| 125 | ········<cpe-lang:platform·id="eks-node"> | 120 | ········<cpe-lang:platform·id="eks-node"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> |
| 128 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | ||
| 129 | ········</cpe-lang:platform> | ||
| 130 | ······</cpe-lang:platform-specification> | 130 | ······</cpe-lang:platform-specification> |
| 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 131 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 132 | ······<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 133 | ······<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 134 | ······<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 135 | ······<xccdf-1.2:metadata> | 135 | ······<xccdf-1.2:metadata> |
| 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 136 | ········<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 1545, 15 lines modified | Offset 1545, 15 lines modified | ||
| 1545 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1545 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1546 | ············</xccdf-1.2:check> | 1546 | ············</xccdf-1.2:check> |
| 1547 | ··········</xccdf-1.2:Rule> | 1547 | ··········</xccdf-1.2:Rule> |
| 1548 | ········</xccdf-1.2:Group> | 1548 | ········</xccdf-1.2:Group> |
| 1549 | ······</xccdf-1.2:Group> | 1549 | ······</xccdf-1.2:Group> |
| 1550 | ····</xccdf-1.2:Benchmark> | 1550 | ····</xccdf-1.2:Benchmark> |
| 1551 | ··</ds:component> | 1551 | ··</ds:component> |
| 1552 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2025-0 | 1552 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 1553 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1553 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1554 | ······<oval-def:generator> | 1554 | ······<oval-def:generator> |
| 1555 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1555 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1556 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> | 1556 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> |
| 1557 | ········<oval:schema_version>5.11</oval:schema_version> | 1557 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1558 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 1558 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 1559 | ······</oval-def:generator> | 1559 | ······</oval-def:generator> |
| Offset 2166, 354 lines modified | Offset 2166, 354 lines modified | ||
| 2166 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2166 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2167 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2167 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2168 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2168 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2169 | ········</oval-def:local_variable> | 2169 | ········</oval-def:local_variable> |
| 2170 | ······</oval-def:variables> | 2170 | ······</oval-def:variables> |
| 2171 | ····</oval-def:oval_definitions> | 2171 | ····</oval-def:oval_definitions> |
| 2172 | ··</ds:component> | 2172 | ··</ds:component> |
| 2173 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2025-0 | 2173 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 2174 | ····<ocil:ocil> | 2174 | ····<ocil:ocil> |
| 2175 | ······<ocil:generator> | 2175 | ······<ocil:generator> |
| 2176 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2176 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2177 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 2177 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 2178 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2178 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2179 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 2179 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 2180 | ······</ocil:generator> | 2180 | ······</ocil:generator> |
| 2181 | ······<ocil:questionnaires> | 2181 | ······<ocil:questionnaires> |
| 2182 | ········<ocil:questionnaire·id="ocil:ssg- | 2182 | ········<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> |
| 2183 | ··········<ocil:title> | 2183 | ··········<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> |
| 2184 | ··········<ocil:actions> | 2184 | ··········<ocil:actions> |
| 2185 | ············<ocil:test_action_ref>ocil:ssg- | 2185 | ············<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> |
| 2186 | ··········</ocil:actions> | 2186 | ··········</ocil:actions> |
| 2187 | ········</ocil:questionnaire> | 2187 | ········</ocil:questionnaire> |
| 2188 | ········<ocil:questionnaire·id="ocil:ssg- | 2188 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 2189 | ··········<ocil:title>Ensure· | 2189 | ··········<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| 2190 | ··········<ocil:actions> | 2190 | ··········<ocil:actions> |
| 2191 | ············<ocil:test_action_ref>ocil:ssg- | 2191 | ············<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 2192 | ··········</ocil:actions> | 2192 | ··········</ocil:actions> |
| 2193 | ········</ocil:questionnaire> | 2193 | ········</ocil:questionnaire> |
| 2194 | ········<ocil:questionnaire·id="ocil:ssg- | 2194 | ········<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| 2195 | ··········<ocil:title> | 2195 | ··········<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> |
| 2196 | ··········<ocil:actions> | 2196 | ··········<ocil:actions> |
| 2197 | ············<ocil:test_action_ref>ocil:ssg- | 2197 | ············<ocil:test_action_ref>ocil:ssg-file_permissions_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 2198 | ··········</ocil:actions> | 2198 | ··········</ocil:actions> |
| 2199 | ········</ocil:questionnaire> | 2199 | ········</ocil:questionnaire> |
| 2200 | ········<ocil:questionnaire·id="ocil:ssg- | 2200 | ········<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> |
| 2201 | ··········<ocil:title> | 2201 | ··········<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> |
| 2202 | ··········<ocil:actions> | 2202 | ··········<ocil:actions> |
| 2203 | ············<ocil:test_action_ref>ocil:ssg- | 2203 | ············<ocil:test_action_ref>ocil:ssg-configure_tls_action:testaction:1</ocil:test_action_ref> |
| 2204 | ··········</ocil:actions> | 2204 | ··········</ocil:actions> |
| 2205 | ········</ocil:questionnaire> | 2205 | ········</ocil:questionnaire> |
| 2206 | ········<ocil:questionnaire·id="ocil:ssg-file_ow | 2206 | ········<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> |
| 2207 | ··········<ocil:title>Verify· | 2207 | ··········<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> |
| 2208 | ··········<ocil:actions> | 2208 | ··········<ocil:actions> |
| 2209 | ············<ocil:test_action_ref>ocil:ssg-file_ow | 2209 | ············<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 2210 | ··········</ocil:actions> | 2210 | ··········</ocil:actions> |
| 2211 | ········</ocil:questionnaire> | 2211 | ········</ocil:questionnaire> |
| 2212 | ········<ocil:questionnaire·id="ocil:ssg- | 2212 | ········<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 2213 | ··········<ocil:title> | 2213 | ··········<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 2214 | ··········<ocil:actions> | 2214 | ··········<ocil:actions> |
| Max diff block lines reached; 77186/88659 bytes (87.06%) of diff not shown. | |||
| Offset 3, 345 lines modified | Offset 3, 345 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure· | 17 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_kubelet_conf_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Verify·Permissions·on·The·Kubelet·Configuration·File</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-configure_tls_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ow | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify· | 35 | ······<ocil:title>Verify·Permissions·on·the·Worker·Kubeconfig·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_ow | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-iam_integration_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Manage·Users·with·AWS·IAM</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-iam_integration_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_a | 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_a | 61 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_anonymous_auth_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Disable·Anonymous·Authentication·to·the·Kubelet</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_anonymous_auth_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_namespaces_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·that·application·Namespaces·have·Network·Policies·defined.</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_namespaces_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>kubelet·-· | 77 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 79 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>kubelet·-·En | 83 | ······<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-kubelet_ | 85 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-read_only_registry_access_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·Cluster·Service·Account·with·read-only·access·to·Amazon·ECR</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-read_only_registry_access_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-image_scanning_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure· | 101 | ······<ocil:title>Ensure·Image·Vulnerability·Scanning</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-image_scanning_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_streaming_connections_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>kubelet·-· | 107 | ······<ocil:title>kubelet·-·Do·Not·Disable·Streaming·Timeouts</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_ | 109 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_streaming_connections_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> | 118 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> | 119 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> | 121 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> | 124 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_worker_kubeconfig_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | 125 | ······<ocil:title>Verify·User·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | 127 | ········<ocil:test_action_ref>ocil:ssg-file_owner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 65215/77370 bytes (84.29%) of diff not shown. | |||
| Offset 72, 24 lines modified | Offset 72, 24 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="eks-node"> | 79 | ····<cpe-lang:platform·id="eks-node"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_eks_node:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ··</cpe-lang:platform-specification> | 89 | ··</cpe-lang:platform-specification> |
| 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> | 90 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"/> |
| 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> | 91 | ··<xccdf-1.2:platform·idref="cpe:/o:amazon:elastic_kubernetes_service_node:1"/> |
| 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> | 92 | ··<xccdf-1.2:platform·idref="cpe:/a:amazon:elastic_kubernetes_service:1"/> |
| 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 93 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| 94 | ··<xccdf-1.2:metadata> | 94 | ··<xccdf-1.2:metadata> |
| 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> | 95 | ····<dc:publisher>SCAP·Security·Guide·Project</dc:publisher> |
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 3488, 15 lines modified | Offset 3488, 15 lines modified | ||
| 3488 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3488 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3489 | ············</xccdf-1.2:check> | 3489 | ············</xccdf-1.2:check> |
| 3490 | ··········</xccdf-1.2:Rule> | 3490 | ··········</xccdf-1.2:Rule> |
| 3491 | ········</xccdf-1.2:Group> | 3491 | ········</xccdf-1.2:Group> |
| 3492 | ······</xccdf-1.2:Group> | 3492 | ······</xccdf-1.2:Group> |
| 3493 | ····</xccdf-1.2:Benchmark> | 3493 | ····</xccdf-1.2:Benchmark> |
| 3494 | ··</ds:component> | 3494 | ··</ds:component> |
| 3495 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2025-0 | 3495 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 3496 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3496 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3497 | ······<oval-def:generator> | 3497 | ······<oval-def:generator> |
| 3498 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3498 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3499 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> | 3499 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> |
| 3500 | ········<oval:schema_version>5.11</oval:schema_version> | 3500 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3501 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 3501 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 3502 | ······</oval-def:generator> | 3502 | ······</oval-def:generator> |
| Offset 5198, 304 lines modified | Offset 5198, 304 lines modified | ||
| 5198 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5198 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5199 | ············</oval-def:concat> | 5199 | ············</oval-def:concat> |
| 5200 | ··········</oval-def:unique> | 5200 | ··········</oval-def:unique> |
| 5201 | ········</oval-def:local_variable> | 5201 | ········</oval-def:local_variable> |
| 5202 | ······</oval-def:variables> | 5202 | ······</oval-def:variables> |
| 5203 | ····</oval-def:oval_definitions> | 5203 | ····</oval-def:oval_definitions> |
| 5204 | ··</ds:component> | 5204 | ··</ds:component> |
| 5205 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2025-0 | 5205 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 5206 | ····<ocil:ocil> | 5206 | ····<ocil:ocil> |
| 5207 | ······<ocil:generator> | 5207 | ······<ocil:generator> |
| 5208 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5208 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5209 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5209 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 5210 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5210 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5211 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 5211 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 5212 | ······</ocil:generator> | 5212 | ······</ocil:generator> |
| 5213 | ······<ocil:questionnaires> | 5213 | ······<ocil:questionnaires> |
| 5214 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 5215 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 5216 | ··········<ocil:actions> | ||
| 5217 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> | ||
| 5218 | ··········</ocil:actions> | ||
| 5219 | ········</ocil:questionnaire> | ||
| 5220 | ········<ocil:questionnaire·id="ocil:ssg-firefox_ | 5214 | ········<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 5221 | ··········<ocil:title> | 5215 | ··········<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 5222 | ··········<ocil:actions> | 5216 | ··········<ocil:actions> |
| 5223 | ············<ocil:test_action_ref>ocil:ssg-firefox_ | 5217 | ············<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 5224 | ··········</ocil:actions> | 5218 | ··········</ocil:actions> |
| 5225 | ········</ocil:questionnaire> | 5219 | ········</ocil:questionnaire> |
| 5226 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5220 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 5227 | ··········<ocil:title> | 5221 | ··········<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 5228 | ··········<ocil:actions> | 5222 | ··········<ocil:actions> |
| 5229 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5223 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 5230 | ··········</ocil:actions> | 5224 | ··········</ocil:actions> |
| 5231 | ········</ocil:questionnaire> | 5225 | ········</ocil:questionnaire> |
| 5232 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5226 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 5233 | ··········<ocil:title> | 5227 | ··········<ocil:title>Disable·Firefox·Studies</ocil:title> |
| 5234 | ··········<ocil:actions> | 5228 | ··········<ocil:actions> |
| 5235 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5229 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 5236 | ··········</ocil:actions> | 5230 | ··········</ocil:actions> |
| 5237 | ········</ocil:questionnaire> | 5231 | ········</ocil:questionnaire> |
| 5238 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> | 5232 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 5239 | ··········<ocil:title>Enable·Shared·System·Certificates</ocil:title> | 5233 | ··········<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 5240 | ··········<ocil:actions> | 5234 | ··········<ocil:actions> |
| 5241 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> | 5235 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 5242 | ··········</ocil:actions> | 5236 | ··········</ocil:actions> |
| 5243 | ········</ocil:questionnaire> | 5237 | ········</ocil:questionnaire> |
| 5244 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-d | 5238 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 5245 | ··········<ocil:title>Disable·Firefox· | 5239 | ··········<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 5246 | ··········<ocil:actions> | 5240 | ··········<ocil:actions> |
| 5247 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-d | 5241 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 5248 | ··········</ocil:actions> | 5242 | ··········</ocil:actions> |
| 5249 | ········</ocil:questionnaire> | 5243 | ········</ocil:questionnaire> |
| 5250 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5244 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 5251 | ··········<ocil:title>Firefox· | 5245 | ··········<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 5252 | ··········<ocil:actions> | 5246 | ··········<ocil:actions> |
| 5253 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5247 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 5254 | ··········</ocil:actions> | 5248 | ··········</ocil:actions> |
| 5255 | ········</ocil:questionnaire> | 5249 | ········</ocil:questionnaire> |
| 5256 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5250 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 5257 | ··········<ocil:title> | 5251 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 5258 | ··········<ocil:actions> | 5252 | ··········<ocil:actions> |
| 5259 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5253 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 5260 | ··········</ocil:actions> | 5254 | ··········</ocil:actions> |
| 5261 | ········</ocil:questionnaire> | 5255 | ········</ocil:questionnaire> |
| 5262 | ········<ocil:questionnaire·id="ocil:ssg- | 5256 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 5263 | ··········<ocil:title> | 5257 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 5264 | ··········<ocil:actions> | 5258 | ··········<ocil:actions> |
| 5265 | ············<ocil:test_action_ref>ocil:ssg- | 5259 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 5266 | ··········</ocil:actions> | 5260 | ··········</ocil:actions> |
| 5267 | ········</ocil:questionnaire> | 5261 | ········</ocil:questionnaire> |
| 5268 | ········<ocil:questionnaire·id="ocil:ssg-firefox_p | 5262 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 5269 | ··········<ocil:title> | 5263 | ··········<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 5270 | ··········<ocil:actions> | 5264 | ··········<ocil:actions> |
| 5271 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5265 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 5272 | ··········</ocil:actions> | 5266 | ··········</ocil:actions> |
| 5273 | ········</ocil:questionnaire> | 5267 | ········</ocil:questionnaire> |
| 5274 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5268 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 5275 | ··········<ocil:title> | 5269 | ··········<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 5276 | ··········<ocil:actions> | 5270 | ··········<ocil:actions> |
| 5277 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5271 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 5278 | ··········</ocil:actions> | 5272 | ··········</ocil:actions> |
| 5279 | ········</ocil:questionnaire> | 5273 | ········</ocil:questionnaire> |
| 5280 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5274 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 5281 | ··········<ocil:title>Disable·Firefox· | 5275 | ··········<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 5282 | ··········<ocil:actions> | 5276 | ··········<ocil:actions> |
| 5283 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5277 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 5284 | ··········</ocil:actions> | 5278 | ··········</ocil:actions> |
| Max diff block lines reached; 44870/56668 bytes (79.18%) of diff not shown. | |||
| Offset 3, 295 lines modified | Offset 3, 295 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 11 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_ | 13 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-fingerprinting_protection_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Enabled·Firefox·Fingerprinting·Protection</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-fingerprinting_protection_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_studies_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Firefox·Studies</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_studies_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> | 29 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-d | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-development_tools_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable·Firefox· | 35 | ······<ocil:title>Disable·Firefox·Development·Tools</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-d | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-development_tools_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Firefox· | 41 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_p | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-extension_recommendation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·Firefox· | 71 | ······<ocil:title>Disabled·Firefox·Extension·Recommendations</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-extension_recommendation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_changes_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Disable·JavaScript's·Raise·Or·Lower·Windows·Capability</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_changes_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable· | 95 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> | ||
| 104 | ······</ocil:actions> | ||
| 105 | ····</ocil:questionnaire> | ||
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> | ||
| 107 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> | ||
| 108 | ······<ocil:actions> | ||
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | 112 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> | 113 | ······<ocil:title>The·DoD·Root·Certificate·Exists</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> | 115 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-dod_root_certificate_installed_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 118 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 121 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 36928/49392 bytes (74.77%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····3044·2025-03-01·08:08:00.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····3044·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··372 | 3 | -rw-r--r--···0········0········0··3720544·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15999, 146 lines modified | Offset 15999, 146 lines modified | ||
| 0003e7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e7f0:·2223·6964·6d31·3736·3722·2074·6162·696e··"#idm1767"·tabin | 0003e7f0:·2223·6964·6d31·3736·3722·2074·6162·696e··"#idm1767"·tabin | ||
| 0003e800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e850:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e860:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e870:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e880:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e890:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e8a0:·6d31·3736·3722·3e3c·7461·626c·6520·636c··m1767"><table·cl | |||
| 0003e8b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e8c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e8d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e8e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e8f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e900:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e910:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e920:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e930:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e940:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e950:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e960:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e970:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e980:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003e990:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003e9a0:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003e9b0:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003e9c0:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003e9d0:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003e9e0:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003e9f0:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea00:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea10:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea20:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003ea30:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003ea40:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003ea50:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ea60:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003ea70:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003ea80:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003ea90:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eaa0:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eab0:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eac0:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003ead0:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eae0:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eaf0:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb00:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb10:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb20:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eb30:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003eb40:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003eb50:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003eb60:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003eb70:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003eb80:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003eb90:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003eba0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ebb0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ebc0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ebd0:·2223·6964·6d31·3736·3822·2074·6162·696e··"#idm1768"·tabin | |||
| 0003ebe0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ebf0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec00:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec10:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec20:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003ec30:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003ec40:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003ec50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003ec60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e | 0003ec70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003e8a0:·2269·646d·3137·3637·223e·3c74·6162·6c65··"idm1767"><table | |||
| 0003e8b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003e8c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003e8d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003e8e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003e8f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003e900:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003e910:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003e920:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003e930:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e940:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003e950:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003e960:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003e970:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003e980:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003e990:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003e9a0:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | |||
| 0003e9b0:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003e9c0:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | |||
| 0003e9d0:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | |||
| 0003e9e0:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | |||
| 0003e9f0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | |||
| 0003ea00:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | |||
| 0003ea10:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | |||
| 0003ea20:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003ea30:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003ea40:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | |||
| 0003ea50:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ea60:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ea70:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ea80:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003ea90:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003eaa0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003eab0:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | |||
| 0003eac0:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | |||
| 0003ead0:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | |||
| 0003eae0:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | |||
| 0003eaf0:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | |||
| 0003eb00:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | |||
| 0003eb10:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb20:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | |||
| 0003eb30:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | |||
| 0003eb40:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003eb50:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | |||
| 0003eb60:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | |||
| 0003eb70:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | |||
| 0003eb80:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | |||
| 0003eb90:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | |||
| 0003eba0:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | |||
| 0003ebb0:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | |||
| 0003ebc0:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | |||
| 0003ebd0:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | |||
| 0003ebe0:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | |||
| Max diff block lines reached; 1016880/1035676 bytes (98.19%) of diff not shown. | |||
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| 355 | ··-·medium_severity | 376 | ··-·medium_severity |
| 356 | ··-·no_reboot_needed | 377 | ··-·no_reboot_needed |
| 357 | ··-·restrict_strategy | 378 | ··-·restrict_strategy |
| 358 | ··-·sudo_remove_nopasswd | 379 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 119057/124505 bytes (95.62%) of diff not shown. | |||
| Offset 16020, 146 lines modified | Offset 16020, 146 lines modified | ||
| 0003e930:·6765·743d·2223·6964·6d31·3736·3722·2074··get="#idm1767"·t | 0003e930:·6765·743d·2223·6964·6d31·3736·3722·2074··get="#idm1767"·t | ||
| 0003e940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e9a0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e9b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e9c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e9d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e9e0:·3d22·6964·6d31·3736·3722·3e3c·7461·626c··="idm1767"><tabl | |||
| 0003e9f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ea00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ea10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ea20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ea30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ea40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ea60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ea70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ea80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ea90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003eaa0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003eab0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003eac0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003ead0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003eae0:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003eaf0:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003eb00:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003eb10:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003eb20:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003eb30:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003eb40:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003eb50:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003eb60:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003eb70:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003eb80:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003eb90:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003eba0:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ebb0:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ebc0:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ebd0:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ebe0:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ebf0:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ec00:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ec10:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003ec20:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003ec30:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003ec40:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ec50:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003ec60:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003ec70:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003ec80:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003ec90:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eca0:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003ecb0:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003ecc0:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003ecd0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ece0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ecf0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ed00:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ed10:·6765·743d·2223·6964·6d31·3736·3822·2074··get="#idm1768"·t | |||
| 0003ed20:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ed30:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ed40:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ed50:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ed60:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ed70:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003ed80:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003ed90:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e9c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003e9d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003e9e0:·2069·643d·2269·646d·3137·3637·223e·3c74···id="idm1767"><t | |||
| 0003e9f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ea00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ea10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ea20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ea30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ea40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ea50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ea60:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ea70:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ea80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ea90:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003eaa0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eab0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003eac0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003ead0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003eae0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003eaf0:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | |||
| 0003eb00:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | |||
| 0003eb10:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | |||
| 0003eb20:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | |||
| 0003eb30:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | |||
| 0003eb40:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | |||
| 0003eb50:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | |||
| 0003eb60:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003eb70:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003eb80:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | |||
| 0003eb90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003eba0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ebb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ebc0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ebd0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ebe0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ebf0:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | |||
| 0003ec00:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | |||
| 0003ec10:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | |||
| 0003ec20:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | |||
| 0003ec30:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | |||
| 0003ec40:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | |||
| 0003ec50:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003ec60:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | |||
| 0003ec70:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | |||
| 0003ec80:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003ec90:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | |||
| 0003eca0:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | |||
| 0003ecb0:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | |||
| 0003ecc0:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | |||
| 0003ecd0:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | |||
| 0003ece0:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | |||
| 0003ecf0:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | |||
| 0003ed00:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | |||
| 0003ed10:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | |||
| 0003ed20:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | |||
| 0003ed30:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | |||
| Max diff block lines reached; 1165577/1184373 bytes (98.41%) of diff not shown. | |||
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| 359 | ··-·medium_severity | 380 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 381 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 382 | ··-·restrict_strategy |
| 362 | ··-·sudo_remove_nopasswd | 383 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139136/144584 bytes (96.23%) of diff not shown. | |||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3736·3722·2074·6162··t="#idm1767"·tab | 00039b60:·743d·2223·6964·6d31·3736·3722·2074·6162··t="#idm1767"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3736·3722·3e3c·7461·626c·6520··idm1767"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3736·3822·2074·6162··t="#idm1768"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3137·3637·223e·3c74·6162··d="idm1767"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| 00039e60:·6720·2161·7574·6865·6e74·6963·6174·6520··g·!authenticate· | |||
| 00039e70:·6672·6f6d·2073·7564·6f65·7273·2066·696c··from·sudoers·fil | |||
| 00039e80:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | |||
| 00039e90:·6c74·696e·2e72·6570·6c61·6365·3a0a·2020··ltin.replace:.·· | |||
| 00039ea0:·2020·7265·6765·7870·3a20·285e·283f·2123····regexp:·(^(?!# | |||
| 00039eb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 00039ec0:·7469·6361·7465·2e2a·2429·0a20·2020·2072··ticate.*$).····r | |||
| 00039ed0:·6570·6c61·6365·3a20·2723·205c·6726·6c74··eplace:·'#·\g< | |||
| 00039ee0:·3b31·2667·743b·270a·2020·2020·7061·7468··;1>'.····path | |||
| 00039ef0:·3a20·277b·7b20·6974·656d·2e70·6174·6820··:·'{{·item.path· | |||
| 00039f00:·7d7d·270a·2020·2020·7661·6c69·6461·7465··}}'.····validate | |||
| 00039f10:·3a20·2f75·7372·2f73·6269·6e2f·7669·7375··:·/usr/sbin/visu | |||
| 00039f20:·646f·202d·6366·2025·730a·2020·7769·7468··do·-cf·%s.··with | |||
| 00039f30:·5f69·7465·6d73·3a0a·2020·2d20·7061·7468··_items:.··-·path | |||
| 00039f40:·3a20·2f65·7463·2f73·7564·6f65·7273·0a20··:·/etc/sudoers.· | |||
| 00039f50:·202d·2027·7b7b·2073·7564·6f65·7273·2e66···-·'{{·sudoers.f | |||
| Max diff block lines reached; 274130/293064 bytes (93.54%) of diff not shown. | |||
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| 218 | ··-·medium_severity | 239 | ··-·medium_severity |
| 219 | ··-·no_reboot_needed | 240 | ··-·no_reboot_needed |
| 220 | ··-·restrict_strategy | 241 | ··-·restrict_strategy |
| 221 | ··-·sudo_remove_nopasswd | 242 | ··-·sudo_remove_nopasswd |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 227 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 228 | ··if·[·!·-e·"$f"·]·;·then | ||
| 229 | ····continue | ||
| 230 | ··fi | ||
| 231 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 232 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 34899/40356 bytes (86.48%) of diff not shown. | |||
| Offset 16010, 146 lines modified | Offset 16010, 146 lines modified | ||
| 0003e890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003e890:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003e8a0:·6d31·3736·3722·2074·6162·696e·6465·783d··m1767"·tabindex= | 0003e8a0:·6d31·3736·3722·2074·6162·696e·6465·783d··m1767"·tabindex= | ||
| 0003e8b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003e8b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003e8c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003e8c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003e8d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003e8d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003e8e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003e8e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003e8f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003e8f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003e900:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003e910:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003e920:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003e930:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003e940:·6170·7365·2220·6964·3d22·6964·6d31·3736··apse"·id="idm176 | |||
| 0003e950:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003e960:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003e970:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003e980:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003e990:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003e9a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003e9b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003e9d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e9e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003e9f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ea00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003ea10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ea20:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003ea30:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ea40:·653e·3c70·7265·3e3c·636f·6465·3e0a·666f··e><pre><code>.fo | |||
| 0003ea50:·7220·6620·696e·202f·6574·632f·7375·646f··r·f·in·/etc/sudo | |||
| 0003ea60:·6572·7320·2f65·7463·2f73·7564·6f65·7273··ers·/etc/sudoers | |||
| 0003ea70:·2e64·2f2a·203b·2064·6f0a·2020·6966·205b··.d/*·;·do.··if·[ | |||
| 0003ea80:·2021·202d·6520·2224·6622·205d·203b·2074···!·-e·"$f"·]·;·t | |||
| 0003ea90:·6865·6e0a·2020·2020·636f·6e74·696e·7565··hen.····continue | |||
| 0003eaa0:·0a20·2066·690a·2020·6d61·7463·6869·6e67··.··fi.··matching | |||
| 0003eab0:·5f6c·6973·743d·2428·6772·6570·202d·5020··_list=$(grep·-P· | |||
| 0003eac0:·275e·283f·2123·292e·2a5b·5c73·5d2b·5c21··'^(?!#).*[\s]+\! | |||
| 0003ead0:·6175·7468·656e·7469·6361·7465·2e2a·2427··authenticate.*$' | |||
| 0003eae0:·2024·6620·7c20·756e·6971·2029·0a20·2069···$f·|·uniq·).··i | |||
| 0003eaf0:·6620·2120·7465·7374·202d·7a20·2224·6d61··f·!·test·-z·"$ma | |||
| 0003eb00:·7463·6869·6e67·5f6c·6973·7422·3b20·7468··tching_list";·th | |||
| 0003eb10:·656e·0a20·2020·2077·6869·6c65·2049·4653··en.····while·IFS | |||
| 0003eb20:·3d20·7265·6164·202d·7220·656e·7472·793b··=·read·-r·entry; | |||
| 0003eb30:·2064·6f0a·2020·2020·2020·2320·636f·6d6d···do.······#·comm | |||
| 0003eb40:·656e·7420·6f75·7420·2221·6175·7468·656e··ent·out·"!authen | |||
| 0003eb50:·7469·6361·7465·2220·6d61·7463·6865·7320··ticate"·matches· | |||
| 0003eb60:·746f·2070·7265·7365·7276·6520·7573·6572··to·preserve·user | |||
| 0003eb70:·2064·6174·610a·2020·2020·2020·7365·6420···data.······sed· | |||
| 0003eb80:·2d69·2022·732f·5e24·7b65·6e74·7279·7d24··-i·"s/^${entry}$ | |||
| 0003eb90:·2f23·2026·616d·703b·2f67·2220·2466·0a20··/#·&/g"·$f.· | |||
| 0003eba0:·2020·2064·6f6e·6520·266c·743b·266c·743b·····done·<< | |||
| 0003ebb0:·266c·743b·2022·246d·6174·6368·696e·675f··<·"$matching_ | |||
| 0003ebc0:·6c69·7374·220a·0a20·2020·202f·7573·722f··list"..····/usr/ | |||
| 0003ebd0:·7362·696e·2f76·6973·7564·6f20·2d63·6620··sbin/visudo·-cf· | |||
| 0003ebe0:·2466·2026·616d·703b·2667·743b·202f·6465··$f·&>·/de | |||
| 0003ebf0:·762f·6e75·6c6c·207c·7c20·6563·686f·2022··v/null·||·echo·" | |||
| 0003ec00:·4661·696c·2074·6f20·7661·6c69·6461·7465··Fail·to·validate | |||
| 0003ec10:·2024·6620·7769·7468·2076·6973·7564·6f22···$f·with·visudo" | |||
| 0003ec20:·0a20·2066·690a·646f·6e65·0a3c·2f63·6f64··.··fi.done.</cod | |||
| 0003ec30:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ec40:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ec50:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ec60:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ec70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ec80:·6d31·3736·3822·2074·6162·696e·6465·783d··m1768"·tabindex= | |||
| 0003ec90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003eca0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ecb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ecc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ecd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003e | 0003ece0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003e | 0003ecf0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003e | 0003ed00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003e | 0003ed10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003e | 0003ed20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003e | 0003ed30:·3137·3638·223e·3c74·6162·6c65·2063·6c61··1768"><table·cla | ||
| 0003e | 0003ed40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003e | 0003ed50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003e | 0003ed60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003e | 0003ed70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003e | 0003ed80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003e | 0003ed90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003e9c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003e9d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003e9e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003e9f0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003ea00:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003ea10:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003ea20:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | |||
| 0003ea30:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | |||
| 0003ea40:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ea50:·2d20·6e61·6d65·3a20·4669·6e64·202f·6574··-·name:·Find·/et | |||
| 0003ea60:·632f·7375·646f·6572·732e·642f·2066·696c··c/sudoers.d/·fil | |||
| 0003ea70:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | |||
| 0003ea80:·6c74·696e·2e66·696e·643a·0a20·2020·2070··ltin.find:.····p | |||
| 0003ea90:·6174·6873·3a0a·2020·2020·2d20·2f65·7463··aths:.····-·/etc | |||
| 0003eaa0:·2f73·7564·6f65·7273·2e64·2f0a·2020·7265··/sudoers.d/.··re | |||
| 0003eab0:·6769·7374·6572·3a20·7375·646f·6572·730a··gister:·sudoers. | |||
| 0003eac0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | |||
| 0003ead0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003eae0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003eaf0:·4941·2d31·310a·2020·2d20·6c6f·775f·636f··IA-11.··-·low_co | |||
| 0003eb00:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003eb10:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003eb20:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003eb30:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003eb40:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | |||
| 0003eb50:·745f·7374·7261·7465·6779·0a20·202d·2073··t_strategy.··-·s | |||
| 0003eb60:·7564·6f5f·7265·6d6f·7665·5f6e·6f5f·6175··udo_remove_no_au | |||
| 0003eb70:·7468·656e·7469·6361·7465·0a0a·2d20·6e61··thenticate..-·na | |||
| 0003eb80:·6d65·3a20·5265·6d6f·7665·206c·696e·6573··me:·Remove·lines | |||
| 0003eb90:·2063·6f6e·7461·696e·696e·6720·2161·7574···containing·!aut | |||
| 0003eba0:·6865·6e74·6963·6174·6520·6672·6f6d·2073··henticate·from·s | |||
| 0003ebb0:·7564·6f65·7273·2066·696c·6573·0a20·2061··udoers·files.··a | |||
| 0003ebc0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e72··nsible.builtin.r | |||
| 0003ebd0:·6570·6c61·6365·3a0a·2020·2020·7265·6765··eplace:.····rege | |||
| 0003ebe0:·7870·3a20·285e·283f·2123·292e·2a5b·5c73··xp:·(^(?!#).*[\s | |||
| 0003ebf0:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003ec00:·2e2a·2429·0a20·2020·2072·6570·6c61·6365··.*$).····replace | |||
| 0003ec10:·3a20·2723·205c·6726·6c74·3b31·2667·743b··:·'#·\g<1> | |||
| 0003ec20:·270a·2020·2020·7061·7468·3a20·277b·7b20··'.····path:·'{{· | |||
| 0003ec30:·6974·656d·2e70·6174·6820·7d7d·270a·2020··item.path·}}'.·· | |||
| 0003ec40:·2020·7661·6c69·6461·7465·3a20·2f75·7372····validate:·/usr | |||
| 0003ec50:·2f73·6269·6e2f·7669·7375·646f·202d·6366··/sbin/visudo·-cf | |||
| 0003ec60:·2025·730a·2020·7769·7468·5f69·7465·6d73···%s.··with_items | |||
| 0003ec70:·3a0a·2020·2d20·7061·7468·3a20·2f65·7463··:.··-·path:·/etc | |||
| 0003ec80:·2f73·7564·6f65·7273·0a20·202d·2027·7b7b··/sudoers.··-·'{{ | |||
| 0003ec90:·2073·7564·6f65·7273·2e66·696c·6573·207d···sudoers.files·} | |||
| Max diff block lines reached; 1165327/1184123 bytes (98.41%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| 357 | ··-·medium_severity | 378 | ··-·medium_severity |
| 358 | ··-·no_reboot_needed | 379 | ··-·no_reboot_needed |
| 359 | ··-·restrict_strategy | 380 | ··-·restrict_strategy |
| 360 | ··-·sudo_remove_nopasswd | 381 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139082/144530 bytes (96.23%) of diff not shown. | |||
| Offset 16217, 783 lines modified | Offset 16217, 783 lines modified | ||
| 0003f580:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003f580:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003f590:·743d·2223·6964·6d34·3936·3922·2074·6162··t="#idm4969"·tab | 0003f590:·743d·2223·6964·6d34·3936·3922·2074·6162··t="#idm4969"·tab | ||
| 0003f5a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003f5a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003f5b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003f5b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003f5c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003f5c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003f5d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003f5d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 0003f5e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003f5e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003f5f0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003f5f0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003f600:·6 | 0003f600:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003f610:· | 0003f610:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003f620:· | 0003f620:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003f630:·6 | 0003f630:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003f640:·6 | 0003f640:·6964·6d34·3936·3922·3e3c·7072·653e·3c63··idm4969"><pre><c | ||
| 0003f650:·6 | 0003f650:·6f64·653e·2320·5265·6d65·6469·6174·696f··ode>#·Remediatio | ||
| 0003f660:· | 0003f660:·6e20·6973·2061·7070·6c69·6361·626c·6520··n·is·applicable· | ||
| 0003f670:·6 | 0003f670:·6f6e·6c79·2069·6e20·6365·7274·6169·6e20··only·in·certain· | ||
| 0003f680:· | 0003f680:·706c·6174·666f·726d·730a·6966·2064·706b··platforms.if·dpk | ||
| 0003f690:·72 | 0003f690:·672d·7175·6572·7920·2d2d·7368·6f77·202d··g-query·--show·- | ||
| 0003f6a0:· | 0003f6a0:·2d73·686f·7766·6f72·6d61·743d·2724·7b64··-showformat='${d | ||
| 0003f6b0:·6 | 0003f6b0:·623a·5374·6174·7573·2d53·7461·7475·737d··b:Status-Status} | ||
| 0003f6c0:· | 0003f6c0:·0a27·2027·6c69·6e75·782d·6261·7365·2720··.'·'linux-base'· | ||
| 0003f6d0:· | 0003f6d0:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | ||
| 0003f6e0:· | 0003f6e0:·2067·7265·7020·2d71·205e·696e·7374·616c···grep·-q·^instal | ||
| 0003f6f0:· | 0003f6f0:·6c65·6420·2661·6d70·3b26·616d·703b·2064··led·&&·d | ||
| 0003f700:· | 0003f700:·706b·672d·7175·6572·7920·2d2d·7368·6f77··pkg-query·--show | ||
| 0003f710:· | 0003f710:·202d·2d73·686f·7766·6f72·6d61·743d·2724···--showformat='$ | ||
| 0003f720:· | 0003f720:·7b64·623a·5374·6174·7573·2d53·7461·7475··{db:Status-Statu | ||
| 0003f730:· | 0003f730:·737d·5c6e·2720·2772·7379·736c·6f67·2720··s}\n'·'rsyslog'· | ||
| 0003f740:· | 0003f740:·3226·6774·3b2f·6465·762f·6e75·6c6c·207c··2>/dev/null·| | ||
| 0003f750:· | 0003f750:·2067·7265·7020·2d71·2027·5e69·6e73·7461···grep·-q·'^insta | ||
| 0003f760:·6 | 0003f760:·6c6c·6564·273b·2074·6865·6e0a·0a23·204c··lled';·then..#·L | ||
| 0003f770:·6 | 0003f770:·6973·7420·6f66·206c·6f67·2066·696c·6520··ist·of·log·file· | ||
| 0003f780:· | 0003f780:·7061·7468·7320·746f·2062·6520·696e·7370··paths·to·be·insp | ||
| 0003f790:· | 0003f790:·6563·7465·6420·666f·7220·636f·7272·6563··ected·for·correc | ||
| 0003f7a0:· | 0003f7a0:·7420·7065·726d·6973·7369·6f6e·730a·2320··t·permissions.#· | ||
| 0003f7b0:·2 | 0003f7b0:·2a20·5072·696d·6172·696c·7920·696e·7370··*·Primarily·insp | ||
| 0003f7c0:· | 0003f7c0:·6563·7420·6c6f·6720·6669·6c65·2070·6174··ect·log·file·pat | ||
| 0003f7d0:· | 0003f7d0:·6873·206c·6973·7465·6420·696e·202f·6574··hs·listed·in·/et | ||
| 0003f7e0:· | 0003f7e0:·632f·7273·7973·6c6f·672e·636f·6e66·0a52··c/rsyslog.conf.R | ||
| 0003f7f0:·35 | 0003f7f0:·5359·534c·4f47·5f45·5443·5f43·4f4e·4649··SYSLOG_ETC_CONFI | ||
| 0003f800:· | 0003f800:·473d·222f·6574·632f·7273·7973·6c6f·672e··G="/etc/rsyslog. | ||
| 0003f810:· | 0003f810:·636f·6e66·220a·2320·2a20·416e·6420·616c··conf".#·*·And·al | ||
| 0003f820:· | 0003f820:·736f·2074·6865·206c·6f67·2066·696c·6520··so·the·log·file· | ||
| 0003f830:· | 0003f830:·7061·7468·7320·6c69·7374·6564·2061·6674··paths·listed·aft | ||
| 0003f840:·657 | 0003f840:·6572·2072·7379·736c·6f67·2773·2024·496e··er·rsyslog's·$In | ||
| 0003f850:· | 0003f850:·636c·7564·6543·6f6e·6669·6720·6469·7265··cludeConfig·dire | ||
| 0003f860:·6 | 0003f860:·6374·6976·650a·2320·2020·2873·746f·7265··ctive.#···(store | ||
| 0003f870:·20 | 0003f870:·2074·6865·2072·6573·756c·7420·696e·746f···the·result·into | ||
| 0003f880:· | 0003f880:·2061·7272·6179·2066·6f72·2074·6865·2063···array·for·the·c | ||
| 0003f890:· | 0003f890:·6173·6520·7468·6572·6527·7320·7368·656c··ase·there's·shel | ||
| 0003f8a0:· | 0003f8a0:·6c20·676c·6f62·2075·7365·6420·6173·2076··l·glob·used·as·v | ||
| 0003f8b0:·6 | 0003f8b0:·616c·7565·206f·6620·496e·636c·7564·6543··alue·of·IncludeC | ||
| 0003f8c0:· | 0003f8c0:·6f6e·6669·6729·0a72·6561·6461·7272·6179··onfig).readarray | ||
| 0003f8d0:· | 0003f8d0:·202d·7420·4f4c·445f·494e·4320·266c·743b···-t·OLD_INC·< | ||
| 0003f8e0:·20 | 0003f8e0:·2026·6c74·3b28·6772·6570·202d·6520·225c···<(grep·-e·"\ | ||
| 0003f8f0:· | 0003f8f0:·2449·6e63·6c75·6465·436f·6e66·6967·5b5b··$IncludeConfig[[ | ||
| 0003f900:· | 0003f900:·3a73·7061·6365·3a5d·5d5c·2b5b·5e5b·3a73··:space:]]\+[^[:s | ||
| 0003f910:· | 0003f910:·7061·6365·3a5d·3b5d·5c2b·2220·2f65·7463··pace:];]\+"·/etc | ||
| 0003f920:· | 0003f920:·2f72·7379·736c·6f67·2e63·6f6e·6620·7c20··/rsyslog.conf·|· | ||
| 0003f930:· | 0003f930:·6375·7420·2d64·2027·2027·202d·6620·3229··cut·-d·'·'·-f·2) | ||
| 0003f940:· | 0003f940:·0a72·6561·6461·7272·6179·202d·7420·5253··.readarray·-t·RS | ||
| 0003f950:· | 0003f950:·5953·4c4f·475f·494e·434c·5544·455f·434f··YSLOG_INCLUDE_CO | ||
| 0003f960:· | 0003f960:·4e46·4947·2026·6c74·3b20·266c·743b·2866··NFIG·<·<(f | ||
| 0003f970:·6 | 0003f970:·6f72·2049·4e43·5041·5448·2069·6e20·2224··or·INCPATH·in·"$ | ||
| 0003f980:· | 0003f980:·7b4f·4c44·5f49·4e43·5b40·5d7d·223b·2064··{OLD_INC[@]}";·d | ||
| 0003f990:· | 0003f990:·6f20·6576·616c·2070·7269·6e74·6620·2725··o·eval·printf·'% | ||
| 0003f9a0:· | 0003f9a0:·735c·5c6e·2720·2224·7b49·4e43·5041·5448··s\\n'·"${INCPATH | ||
| 0003f9b0:· | 0003f9b0:·7d22·3b20·646f·6e65·290a·7265·6164·6172··}";·done).readar | ||
| 0003f9c0:· | 0003f9c0:·7261·7920·2d74·204e·4557·5f49·4e43·2026··ray·-t·NEW_INC·& | ||
| 0003f9d0:· | 0003f9d0:·6c74·3b20·266c·743b·2873·6564·202d·6e20··lt;·<(sed·-n· | ||
| 0003f9e0:· | 0003f9e0:·272f·5e5c·732a·696e·636c·7564·6528·2f2c··'/^\s*include(/, | ||
| 0003f9f0:· | 0003f9f0:·2f29·2f49·7027·202f·6574·632f·7273·7973··/)/Ip'·/etc/rsys | ||
| 0003fa00:· | 0003fa00:·6c6f·672e·636f·6e66·207c·2073·6564·202d··log.conf·|·sed·- | ||
| 0003fa10:· | 0003fa10:·6e20·2773·402e·2a66·696c·655c·732a·3d5c··n·'s@.*file\s*=\ | ||
| 0003fa20:· | 0003fa20:·732a·225c·285b·2f5b·3a61·6c6e·756d·3a5d··s*"\([/[:alnum:] | ||
| 0003fa30:· | 0003fa30:·5b3a·7075·6e63·743a·5d5d·2a5c·2922·2e2a··[:punct:]]*\)".* | ||
| 0003fa40:· | 0003fa40:·405c·3140·4970·2729·0a72·6561·6461·7272··@\1@Ip').readarr | ||
| 0003fa50:· | 0003fa50:·6179·202d·7420·5253·5953·4c4f·475f·494e··ay·-t·RSYSLOG_IN | ||
| 0003fa60:· | 0003fa60:·434c·5544·4520·266c·743b·2026·6c74·3b28··CLUDE·<·<( | ||
| 0003fa70:·6 | 0003fa70:·666f·7220·494e·4350·4154·4820·696e·2022··for·INCPATH·in·" | ||
| 0003fa80:·2 | 0003fa80:·247b·4e45·575f·494e·435b·405d·7d22·3b20··${NEW_INC[@]}";· | ||
| 0003fa90:·6 | 0003fa90:·646f·2065·7661·6c20·7072·696e·7466·2027··do·eval·printf·' | ||
| 0003faa0:· | 0003faa0:·2573·5c5c·6e27·2022·247b·494e·4350·4154··%s\\n'·"${INCPAT | ||
| 0003fab0:· | 0003fab0:·487d·223b·2064·6f6e·6529·0a0a·2320·4465··H}";·done)..#·De | ||
| 0003fac0:·6 | 0003fac0:·636c·6172·6520·616e·2061·7272·6179·2074··clare·an·array·t | ||
| 0003fad0:·6 | 0003fad0:·6f20·686f·6c64·2074·6865·2066·696e·616c··o·hold·the·final | ||
| 0003fae0:·6c6 | 0003fae0:·206c·6973·7420·6f66·2064·6966·6665·7265···list·of·differe | ||
| 0003faf0:· | 0003faf0:·6e74·206c·6f67·2066·696c·6520·7061·7468··nt·log·file·path | ||
| 0003fb00:·7 | 0003fb00:·730a·6465·636c·6172·6520·2d61·204c·4f47··s.declare·-a·LOG | ||
| 0003fb10:· | 0003fb10:·5f46·494c·455f·5041·5448·530a·0a23·2041··_FILE_PATHS..#·A | ||
| 0003fb20:· | 0003fb20:·7272·6179·2074·6f20·686f·6c64·2061·6c6c··rray·to·hold·all | ||
| 0003fb30:· | 0003fb30:·2072·7379·736c·6f67·2063·6f6e·6669·6720···rsyslog·config· | ||
| 0003fb40:· | 0003fb40:·656e·7472·6965·730a·5253·5953·4c4f·475f··entries.RSYSLOG_ | ||
| 0003fb50:· | 0003fb50:·434f·4e46·4947·533d·2829·0a52·5359·534c··CONFIGS=().RSYSL | ||
| 0003fb60:· | 0003fb60:·4f47·5f43·4f4e·4649·4753·3d28·2224·7b52··OG_CONFIGS=("${R | ||
| 0003fb70:· | 0003fb70:·5359·534c·4f47·5f45·5443·5f43·4f4e·4649··SYSLOG_ETC_CONFI | ||
| 0003fb80:· | 0003fb80:·477d·2220·2224·7b52·5359·534c·4f47·5f49··G}"·"${RSYSLOG_I | ||
| 0003fb90:· | 0003fb90:·4e43·4c55·4445·5f43·4f4e·4649·475b·405d··NCLUDE_CONFIG[@] | ||
| 0003fba0:· | 0003fba0:·7d22·2022·247b·5253·5953·4c4f·475f·494e··}"·"${RSYSLOG_IN | ||
| 0003fbb0:· | 0003fbb0:·434c·5544·455b·405d·7d22·290a·0a23·2047··CLUDE[@]}")..#·G | ||
| 0003fbc0:·6 | 0003fbc0:·6574·2066·756c·6c20·6c69·7374·206f·6620··et·full·list·of· | ||
| 0003fbd0:·6 | 0003fbd0:·6669·6c65·7320·746f·2062·6520·6368·6563··files·to·be·chec | ||
| 0003fbe0:·6 | 0003fbe0:·6b65·640a·2320·5253·5953·4c4f·475f·434f··ked.#·RSYSLOG_CO | ||
| 0003fbf0:· | 0003fbf0:·4e46·4947·5320·6d61·7920·636f·6e74·6169··NFIGS·may·contai | ||
| 0003fc00:·6 | 0003fc00:·6e20·676c·6f62·7320·7375·6368·2061·730a··n·globs·such·as. | ||
| 0003fc10:· | 0003fc10:·2320·2f65·7463·2f72·7379·736c·6f67·2e64··#·/etc/rsyslog.d | ||
| 0003fc20:· | 0003fc20:·2f2a·2e63·6f6e·6620·2f65·7463·2f72·7379··/*.conf·/etc/rsy | ||
| 0003fc30:· | 0003fc30:·736c·6f67·2e64·2f2a·2e66·7275·6c65·0a23··slog.d/*.frule.# | ||
| 0003fc40:· | 0003fc40:·2053·6f2c·206c·6f6f·7020·6f76·6572·2074···So,·loop·over·t | ||
| 0003fc50:· | 0003fc50:·6865·2065·6e74·7269·6573·2069·6e20·5253··he·entries·in·RS | ||
| 0003fc60:· | 0003fc60:·5953·4c4f·475f·434f·4e46·4947·5320·616e··YSLOG_CONFIGS·an | ||
| 0003fc70:· | 0003fc70:·6420·7573·6520·6669·6e64·2074·6f20·6765··d·use·find·to·ge | ||
| 0003fc80:· | 0003fc80:·7420·7468·6520·6c69·7374·206f·6620·696e··t·the·list·of·in | ||
| 0003fc90:· | 0003fc90:·636c·7564·6564·2066·696c·6573·2e0a·5253··cluded·files..RS | ||
| 0003fca0:·5 | 0003fca0:·5953·4c4f·475f·434f·4e46·4947·5f46·494c··YSLOG_CONFIG_FIL | ||
| 0003fcb0:·4 | 0003fcb0:·4553·3d28·290a·666f·7220·454e·5452·5920··ES=().for·ENTRY· | ||
| 0003fcc0:· | 0003fcc0:·696e·2022·247b·5253·5953·4c4f·475f·434f··in·"${RSYSLOG_CO | ||
| 0003fcd0:· | 0003fcd0:·4e46·4947·535b·405d·7d22·0a64·6f0a·0923··NFIGS[@]}".do..# | ||
| 0003fce0:·6 | 0003fce0:·2049·6620·6469·7265·6374·6f72·792c·2072···If·directory,·r | ||
| 0003fcf0:· | 0003fcf0:·7379·736c·6f67·2077·696c·6c20·7365·6172··syslog·will·sear | ||
| 0003fd00:· | 0003fd00:·6368·2066·6f72·2063·6f6e·6669·6720·6669··ch·for·config·fi | ||
| 0003fd10:· | 0003fd10:·6c65·7320·696e·2072·6563·7572·7369·7665··les·in·recursive | ||
| 0003fd20:· | 0003fd20:·6c79·2e0a·0923·2048·6f77·6576·6572·2c20··ly...#·However,· | ||
| 0003fd30:·6 | 0003fd30:·6669·6c65·7320·696e·2068·6964·6465·6e20··files·in·hidden· | ||
| 0003fd40:·7 | 0003fd40:·7375·622d·6469·7265·6374·6f72·6965·7320··sub-directories· | ||
| 0003fd50:· | 0003fd50:·6f72·2068·6964·6465·6e20·6669·6c65·7320··or·hidden·files· | ||
| Max diff block lines reached; 1118642/1225344 bytes (91.29%) of diff not shown. | |||
| Offset 259, 14 lines modified | Offset 259, 142 lines modified | ||
| 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 259 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 260 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 261 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 262 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 263 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 264 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 265 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 267 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 268 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 269 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 270 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 271 | q·'^installed';·then | ||
| 272 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 273 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 274 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 275 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 276 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 277 | of·IncludeConfig) | ||
| 278 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 279 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 280 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 281 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 282 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 283 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 284 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 285 | '%s\\n'·"${INCPATH}";·done) | ||
| 286 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 287 | declare·-a·LOG_FILE_PATHS | ||
| 288 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 289 | RSYSLOG_CONFIGS=() | ||
| 290 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 291 | {RSYSLOG_INCLUDE[@]}") | ||
| 292 | #·Get·full·list·of·files·to·be·checked | ||
| 293 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 294 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 295 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 296 | included·files. | ||
| 297 | RSYSLOG_CONFIG_FILES=() | ||
| 298 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 299 | do | ||
| 300 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 301 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 302 | » if·[·-d·"${ENTRY}"·] | ||
| 303 | » then | ||
| 304 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 305 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 306 | » elif·[·-f·"${ENTRY}"·] | ||
| 307 | » then | ||
| 308 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 309 | » else | ||
| 310 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 311 | » fi | ||
| 312 | done | ||
| 313 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 314 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 315 | configuration) | ||
| 316 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 317 | do | ||
| 318 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 319 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 320 | ('$')·characters, | ||
| 321 | » #·*·Ignore·empty·lines, | ||
| 322 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 323 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 324 | not·log·files | ||
| 325 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 326 | path | ||
| 327 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 328 | all·of·the | ||
| 329 | » #·following·are·met: | ||
| 330 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 331 | » #·*·it·is·preceded·by·space | ||
| 332 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 333 | characters | ||
| 334 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 335 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 336 | » then | ||
| 337 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 338 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 339 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 340 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 341 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 342 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 343 | {FILTERED_PATHS}") | ||
| 344 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 345 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 346 | newline),·split | ||
| 347 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 348 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 349 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 350 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 351 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 352 | » » #·Delete·the·temporary·array | ||
| 353 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 354 | » fi | ||
| 355 | done | ||
| 356 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 357 | grep·regex·is·a·bit | ||
| 358 | #·curly: | ||
| 359 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 360 | #·extract·File="logfile"·expression | ||
| 361 | #·match·only·"logfile"·expression | ||
| 362 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 363 | do | ||
| 364 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 365 | "${LOG_FILE}") | ||
| 366 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 367 | alnum:][:punct:]]*)\"\s*\)") | ||
| 368 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 369 | ]]*)\""|tr·-d·"\"")") | ||
| 370 | done | ||
| 371 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 372 | FILE_CMD="chgrp" | ||
| 373 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 374 | do | ||
| 375 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 376 | further·processing | ||
| 377 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 378 | » then | ||
| Max diff block lines reached; 144452/150103 bytes (96.24%) of diff not shown. | |||
| Offset 16031, 146 lines modified | Offset 16031, 146 lines modified | ||
| 0003e9e0:·7461·7267·6574·3d22·2369·646d·3139·3930··target="#idm1990 | 0003e9e0:·7461·7267·6574·3d22·2369·646d·3139·3930··target="#idm1990 | ||
| 0003e9f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003e9f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ea00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ea00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ea10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ea10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ea20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ea20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ea30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ea30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ea40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ea40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ea50:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003ea60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ea70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ea80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ea90:·2069·643d·2269·646d·3139·3930·223e·3c74···id="idm1990"><t | |||
| 0003eaa0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003eab0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003eac0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ead0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003eae0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003eaf0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003eb00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eb10:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003eb20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003eb30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003eb40:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003eb50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003eb60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003eb70:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003eb80:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003eb90:·653e·3c63·6f64·653e·0a66·6f72·2066·2069··e><code>.for·f·i | |||
| 0003eba0:·6e20·2f65·7463·2f73·7564·6f65·7273·202f··n·/etc/sudoers·/ | |||
| 0003ebb0:·6574·632f·7375·646f·6572·732e·642f·2a20··etc/sudoers.d/*· | |||
| 0003ebc0:·3b20·646f·0a20·2069·6620·5b20·2120·2d65··;·do.··if·[·!·-e | |||
| 0003ebd0:·2022·2466·2220·5d20·3b20·7468·656e·0a20···"$f"·]·;·then.· | |||
| 0003ebe0:·2020·2063·6f6e·7469·6e75·650a·2020·6669·····continue.··fi | |||
| 0003ebf0:·0a20·206d·6174·6368·696e·675f·6c69·7374··.··matching_list | |||
| 0003ec00:·3d24·2867·7265·7020·2d50·2027·5e28·3f21··=$(grep·-P·'^(?! | |||
| 0003ec10:·2329·2e2a·5b5c·735d·2b5c·2161·7574·6865··#).*[\s]+\!authe | |||
| 0003ec20:·6e74·6963·6174·652e·2a24·2720·2466·207c··nticate.*$'·$f·| | |||
| 0003ec30:·2075·6e69·7120·290a·2020·6966·2021·2074···uniq·).··if·!·t | |||
| 0003ec40:·6573·7420·2d7a·2022·246d·6174·6368·696e··est·-z·"$matchin | |||
| 0003ec50:·675f·6c69·7374·223b·2074·6865·6e0a·2020··g_list";·then.·· | |||
| 0003ec60:·2020·7768·696c·6520·4946·533d·2072·6561····while·IFS=·rea | |||
| 0003ec70:·6420·2d72·2065·6e74·7279·3b20·646f·0a20··d·-r·entry;·do.· | |||
| 0003ec80:·2020·2020·2023·2063·6f6d·6d65·6e74·206f·······#·comment·o | |||
| 0003ec90:·7574·2022·2161·7574·6865·6e74·6963·6174··ut·"!authenticat | |||
| 0003eca0:·6522·206d·6174·6368·6573·2074·6f20·7072··e"·matches·to·pr | |||
| 0003ecb0:·6573·6572·7665·2075·7365·7220·6461·7461··eserve·user·data | |||
| 0003ecc0:·0a20·2020·2020·2073·6564·202d·6920·2273··.······sed·-i·"s | |||
| 0003ecd0:·2f5e·247b·656e·7472·797d·242f·2320·2661··/^${entry}$/#·&a | |||
| 0003ece0:·6d70·3b2f·6722·2024·660a·2020·2020·646f··mp;/g"·$f.····do | |||
| 0003ecf0:·6e65·2026·6c74·3b26·6c74·3b26·6c74·3b20··ne·<<<· | |||
| 0003ed00:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ed10:·0a0a·2020·2020·2f75·7372·2f73·6269·6e2f··..····/usr/sbin/ | |||
| 0003ed20:·7669·7375·646f·202d·6366·2024·6620·2661··visudo·-cf·$f·&a | |||
| 0003ed30:·6d70·3b26·6774·3b20·2f64·6576·2f6e·756c··mp;>·/dev/nul | |||
| 0003ed40:·6c20·7c7c·2065·6368·6f20·2246·6169·6c20··l·||·echo·"Fail· | |||
| 0003ed50:·746f·2076·616c·6964·6174·6520·2466·2077··to·validate·$f·w | |||
| 0003ed60:·6974·6820·7669·7375·646f·220a·2020·6669··ith·visudo".··fi | |||
| 0003ed70:·0a64·6f6e·650a·3c2f·636f·6465·3e3c·2f70··.done.</code></p | |||
| 0003ed80:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ed90:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003eda0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003edb0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003edc0:·7461·7267·6574·3d22·2369·646d·3139·3931··target="#idm1991 | |||
| 0003edd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ede0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003edf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ee00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ee10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ee20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e | 0003ee30:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003e | 0003ee40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003e | 0003ee50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003e | 0003ee60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003e | 0003ee70:·7365·2220·6964·3d22·6964·6d31·3939·3122··se"·id="idm1991" | ||
| 0003e | 0003ee80:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003e | 0003ee90:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003e | 0003eea0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003ead0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003eae0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003eaf0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003eb00:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003eb10:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003eb20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003eb30:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003eb40:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003eb50:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003eb60:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003eb70:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 0003eb80:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003eb90:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003eba0:·653a·2046·696e·6420·2f65·7463·2f73·7564··e:·Find·/etc/sud | |||
| 0003ebb0:·6f65·7273·2e64·2f20·6669·6c65·730a·2020··oers.d/·files.·· | |||
| 0003ebc0:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | |||
| 0003ebd0:·6669·6e64·3a0a·2020·2020·7061·7468·733a··find:.····paths: | |||
| 0003ebe0:·0a20·2020·202d·202f·6574·632f·7375·646f··.····-·/etc/sudo | |||
| 0003ebf0:·6572·732e·642f·0a20·2072·6567·6973·7465··ers.d/.··registe | |||
| 0003ec00:·723a·2073·7564·6f65·7273·0a20·2074·6167··r:·sudoers.··tag | |||
| 0003ec10:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 0003ec20:·3533·2d43·4d2d·3628·6129·0a20·202d·204e··53-CM-6(a).··-·N | |||
| 0003ec30:·4953·542d·3830·302d·3533·2d49·412d·3131··IST-800-53-IA-11 | |||
| 0003ec40:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003ec50:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003ec60:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003ec70:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003ec80:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003ec90:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | |||
| 0003eca0:·6174·6567·790a·2020·2d20·7375·646f·5f72··ategy.··-·sudo_r | |||
| 0003ecb0:·656d·6f76·655f·6e6f·5f61·7574·6865·6e74··emove_no_authent | |||
| 0003ecc0:·6963·6174·650a·0a2d·206e·616d·653a·2052··icate..-·name:·R | |||
| 0003ecd0:·656d·6f76·6520·6c69·6e65·7320·636f·6e74··emove·lines·cont | |||
| 0003ece0:·6169·6e69·6e67·2021·6175·7468·656e·7469··aining·!authenti | |||
| 0003ecf0:·6361·7465·2066·726f·6d20·7375·646f·6572··cate·from·sudoer | |||
| 0003ed00:·7320·6669·6c65·730a·2020·616e·7369·626c··s·files.··ansibl | |||
| 0003ed10:·652e·6275·696c·7469·6e2e·7265·706c·6163··e.builtin.replac | |||
| 0003ed20:·653a·0a20·2020·2072·6567·6578·703a·2028··e:.····regexp:·( | |||
| 0003ed30:·5e28·3f21·2329·2e2a·5b5c·735d·2b5c·2161··^(?!#).*[\s]+\!a | |||
| 0003ed40:·7574·6865·6e74·6963·6174·652e·2a24·290a··uthenticate.*$). | |||
| 0003ed50:·2020·2020·7265·706c·6163·653a·2027·2320······replace:·'#· | |||
| 0003ed60:·5c67·266c·743b·3126·6774·3b27·0a20·2020··\g<1>'.··· | |||
| 0003ed70:·2070·6174·683a·2027·7b7b·2069·7465·6d2e···path:·'{{·item. | |||
| 0003ed80:·7061·7468·207d·7d27·0a20·2020·2076·616c··path·}}'.····val | |||
| 0003ed90:·6964·6174·653a·202f·7573·722f·7362·696e··idate:·/usr/sbin | |||
| 0003eda0:·2f76·6973·7564·6f20·2d63·6620·2573·0a20··/visudo·-cf·%s.· | |||
| 0003edb0:·2077·6974·685f·6974·656d·733a·0a20·202d···with_items:.··- | |||
| 0003edc0:·2070·6174·683a·202f·6574·632f·7375·646f···path:·/etc/sudo | |||
| 0003edd0:·6572·730a·2020·2d20·277b·7b20·7375·646f··ers.··-·'{{·sudo | |||
| 0003ede0:·6572·732e·6669·6c65·7320·7d7d·270a·2020··ers.files·}}'.·· | |||
| Max diff block lines reached; 1017432/1036228 bytes (98.19%) of diff not shown. | |||
| Offset 232, 14 lines modified | Offset 232, 35 lines modified | ||
| 232 | ···························1.7,·SR·1.8,·SR·1.9 | 232 | ···························1.7,·SR·1.8,·SR·1.9 |
| 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 233 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 234 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 235 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 236 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 238 | ···························SRG-OS-000373-GPOS-00158 | 238 | ···························SRG-OS-000373-GPOS-00158 |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 244 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 245 | ··if·[·!·-e·"$f"·]·;·then | ||
| 246 | ····continue | ||
| 247 | ··fi | ||
| 248 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 249 | ··if·!·test·-z·"$matching_list";·then | ||
| 250 | ····while·IFS=·read·-r·entry;·do | ||
| 251 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 252 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 253 | ····done·<<<·"$matching_list" | ||
| 254 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 255 | visudo" | ||
| 256 | ··fi | ||
| 257 | done | ||
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 244 | -·name:·Find·/etc/sudoers.d/·files | 263 | -·name:·Find·/etc/sudoers.d/·files |
| 245 | ··ansible.builtin.find: | 264 | ··ansible.builtin.find: |
| Offset 270, 35 lines modified | Offset 291, 14 lines modified | ||
| 270 | ··-·NIST-800-53-IA-11 | 291 | ··-·NIST-800-53-IA-11 |
| 271 | ··-·low_complexity | 292 | ··-·low_complexity |
| 272 | ··-·low_disruption | 293 | ··-·low_disruption |
| 273 | ··-·medium_severity | 294 | ··-·medium_severity |
| 274 | ··-·no_reboot_needed | 295 | ··-·no_reboot_needed |
| 275 | ··-·restrict_strategy | 296 | ··-·restrict_strategy |
| 276 | ··-·sudo_remove_no_authenticate | 297 | ··-·sudo_remove_no_authenticate |
| 277 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 278 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 279 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 280 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 281 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 282 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 283 | ··if·[·!·-e·"$f"·]·;·then | ||
| 284 | ····continue | ||
| 285 | ··fi | ||
| 286 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 287 | ··if·!·test·-z·"$matching_list";·then | ||
| 288 | ····while·IFS=·read·-r·entry;·do | ||
| 289 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 290 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 291 | ····done·<<<·"$matching_list" | ||
| 292 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 293 | visudo" | ||
| 294 | ··fi | ||
| 295 | done | ||
| 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 297 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 299 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 300 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 301 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 302 | ············Without·re-authentication,·users·may·access·resources·or·perform | 304 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 319, 14 lines modified | Offset 319, 35 lines modified | ||
| 319 | ···························1.7,·SR·1.8,·SR·1.9 | 319 | ···························1.7,·SR·1.8,·SR·1.9 |
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 321 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 324 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 325 | ···························SRG-OS-000373-GPOS-00158 | 325 | ···························SRG-OS-000373-GPOS-00158 |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 331 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 332 | ··if·[·!·-e·"$f"·]·;·then | ||
| 333 | ····continue | ||
| 334 | ··fi | ||
| 335 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 336 | ··if·!·test·-z·"$matching_list";·then | ||
| 337 | ····while·IFS=·read·-r·entry;·do | ||
| 338 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 339 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 340 | ····done·<<<·"$matching_list" | ||
| 341 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 342 | visudo" | ||
| 343 | ··fi | ||
| 344 | done | ||
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 345 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 327 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 346 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 328 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 347 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 329 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 348 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 330 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 349 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 331 | -·name:·Find·/etc/sudoers.d/·files | 350 | -·name:·Find·/etc/sudoers.d/·files |
| 332 | ··ansible.builtin.find: | 351 | ··ansible.builtin.find: |
| Offset 357, 35 lines modified | Offset 378, 14 lines modified | ||
| 357 | ··-·NIST-800-53-IA-11 | 378 | ··-·NIST-800-53-IA-11 |
| 358 | ··-·low_complexity | 379 | ··-·low_complexity |
| 359 | ··-·low_disruption | 380 | ··-·low_disruption |
| 360 | ··-·medium_severity | 381 | ··-·medium_severity |
| 361 | ··-·no_reboot_needed | 382 | ··-·no_reboot_needed |
| 362 | ··-·restrict_strategy | 383 | ··-·restrict_strategy |
| 363 | ··-·sudo_remove_nopasswd | 384 | ··-·sudo_remove_nopasswd |
| 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 369 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 370 | ··if·[·!·-e·"$f"·]·;·then | ||
| 371 | ····continue | ||
| 372 | ··fi | ||
| 373 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 374 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 119056/124504 bytes (95.62%) of diff not shown. | |||
| Offset 16051, 146 lines modified | Offset 16051, 146 lines modified | ||
| 0003eb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003eb20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003eb30:·3139·3930·2220·7461·6269·6e64·6578·3d22··1990"·tabindex=" | 0003eb30:·3139·3930·2220·7461·6269·6e64·6578·3d22··1990"·tabindex=" | ||
| 0003eb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003eb40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003eb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003eb50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003eb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003eb60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003eb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003eb70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003eb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003eb80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003eb90:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003eba0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ebb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ebc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ebd0:·7073·6522·2069·643d·2269·646d·3139·3930··pse"·id="idm1990 | |||
| 0003ebe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ebf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ec00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ec10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ec20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ec30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ec40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ec50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ec60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ec70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ec80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ec90:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003eca0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ecb0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ecc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003ecd0:·3e3c·7072·653e·3c63·6f64·653e·0a66·6f72··><pre><code>.for | |||
| 0003ece0:·2066·2069·6e20·2f65·7463·2f73·7564·6f65···f·in·/etc/sudoe | |||
| 0003ecf0:·7273·202f·6574·632f·7375·646f·6572·732e··rs·/etc/sudoers. | |||
| 0003ed00:·642f·2a20·3b20·646f·0a20·2069·6620·5b20··d/*·;·do.··if·[· | |||
| 0003ed10:·2120·2d65·2022·2466·2220·5d20·3b20·7468··!·-e·"$f"·]·;·th | |||
| 0003ed20:·656e·0a20·2020·2063·6f6e·7469·6e75·650a··en.····continue. | |||
| 0003ed30:·2020·6669·0a20·206d·6174·6368·696e·675f····fi.··matching_ | |||
| 0003ed40:·6c69·7374·3d24·2867·7265·7020·2d50·2027··list=$(grep·-P·' | |||
| 0003ed50:·5e28·3f21·2329·2e2a·5b5c·735d·2b5c·2161··^(?!#).*[\s]+\!a | |||
| 0003ed60:·7574·6865·6e74·6963·6174·652e·2a24·2720··uthenticate.*$'· | |||
| 0003ed70:·2466·207c·2075·6e69·7120·290a·2020·6966··$f·|·uniq·).··if | |||
| 0003ed80:·2021·2074·6573·7420·2d7a·2022·246d·6174···!·test·-z·"$mat | |||
| 0003ed90:·6368·696e·675f·6c69·7374·223b·2074·6865··ching_list";·the | |||
| 0003eda0:·6e0a·2020·2020·7768·696c·6520·4946·533d··n.····while·IFS= | |||
| 0003edb0:·2072·6561·6420·2d72·2065·6e74·7279·3b20···read·-r·entry;· | |||
| 0003edc0:·646f·0a20·2020·2020·2023·2063·6f6d·6d65··do.······#·comme | |||
| 0003edd0:·6e74·206f·7574·2022·2161·7574·6865·6e74··nt·out·"!authent | |||
| 0003ede0:·6963·6174·6522·206d·6174·6368·6573·2074··icate"·matches·t | |||
| 0003edf0:·6f20·7072·6573·6572·7665·2075·7365·7220··o·preserve·user· | |||
| 0003ee00:·6461·7461·0a20·2020·2020·2073·6564·202d··data.······sed·- | |||
| 0003ee10:·6920·2273·2f5e·247b·656e·7472·797d·242f··i·"s/^${entry}$/ | |||
| 0003ee20:·2320·2661·6d70·3b2f·6722·2024·660a·2020··#·&/g"·$f.·· | |||
| 0003ee30:·2020·646f·6e65·2026·6c74·3b26·6c74·3b26····done·<<& | |||
| 0003ee40:·6c74·3b20·2224·6d61·7463·6869·6e67·5f6c··lt;·"$matching_l | |||
| 0003ee50:·6973·7422·0a0a·2020·2020·2f75·7372·2f73··ist"..····/usr/s | |||
| 0003ee60:·6269·6e2f·7669·7375·646f·202d·6366·2024··bin/visudo·-cf·$ | |||
| 0003ee70:·6620·2661·6d70·3b26·6774·3b20·2f64·6576··f·&>·/dev | |||
| 0003ee80:·2f6e·756c·6c20·7c7c·2065·6368·6f20·2246··/null·||·echo·"F | |||
| 0003ee90:·6169·6c20·746f·2076·616c·6964·6174·6520··ail·to·validate· | |||
| 0003eea0:·2466·2077·6974·6820·7669·7375·646f·220a··$f·with·visudo". | |||
| 0003eeb0:·2020·6669·0a64·6f6e·650a·3c2f·636f·6465····fi.done.</code | |||
| 0003eec0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003eed0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003eee0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003eef0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ef00:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ef10:·3139·3931·2220·7461·6269·6e64·6578·3d22··1991"·tabindex=" | |||
| 0003ef20:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ef30:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ef40:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ef50:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ef60:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e | 0003ef70:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003e | 0003ef80:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003e | 0003ef90:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003e | 0003efa0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003e | 0003efb0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | ||
| 0003e | 0003efc0:·3939·3122·3e3c·7461·626c·6520·636c·6173··991"><table·clas | ||
| 0003e | 0003efd0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003e | 0003efe0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003e | 0003eff0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003ec20:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ec30:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ec40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ec50:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ec60:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003ec70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ec80:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003ec90:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003eca0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ecb0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 0003ecc0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 0003ecd0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ece0:·206e·616d·653a·2046·696e·6420·2f65·7463···name:·Find·/etc | |||
| 0003ecf0:·2f73·7564·6f65·7273·2e64·2f20·6669·6c65··/sudoers.d/·file | |||
| 0003ed00:·730a·2020·616e·7369·626c·652e·6275·696c··s.··ansible.buil | |||
| 0003ed10:·7469·6e2e·6669·6e64·3a0a·2020·2020·7061··tin.find:.····pa | |||
| 0003ed20:·7468·733a·0a20·2020·202d·202f·6574·632f··ths:.····-·/etc/ | |||
| 0003ed30:·7375·646f·6572·732e·642f·0a20·2072·6567··sudoers.d/.··reg | |||
| 0003ed40:·6973·7465·723a·2073·7564·6f65·7273·0a20··ister:·sudoers.· | |||
| 0003ed50:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | |||
| 0003ed60:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003ed70:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | |||
| 0003ed80:·412d·3131·0a20·202d·206c·6f77·5f63·6f6d··A-11.··-·low_com | |||
| 0003ed90:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003eda0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003edb0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003edc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003edd0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 0003ede0:·5f73·7472·6174·6567·790a·2020·2d20·7375··_strategy.··-·su | |||
| 0003edf0:·646f·5f72·656d·6f76·655f·6e6f·5f61·7574··do_remove_no_aut | |||
| 0003ee00:·6865·6e74·6963·6174·650a·0a2d·206e·616d··henticate..-·nam | |||
| 0003ee10:·653a·2052·656d·6f76·6520·6c69·6e65·7320··e:·Remove·lines· | |||
| 0003ee20:·636f·6e74·6169·6e69·6e67·2021·6175·7468··containing·!auth | |||
| 0003ee30:·656e·7469·6361·7465·2066·726f·6d20·7375··enticate·from·su | |||
| 0003ee40:·646f·6572·7320·6669·6c65·730a·2020·616e··doers·files.··an | |||
| 0003ee50:·7369·626c·652e·6275·696c·7469·6e2e·7265··sible.builtin.re | |||
| 0003ee60:·706c·6163·653a·0a20·2020·2072·6567·6578··place:.····regex | |||
| 0003ee70:·703a·2028·5e28·3f21·2329·2e2a·5b5c·735d··p:·(^(?!#).*[\s] | |||
| 0003ee80:·2b5c·2161·7574·6865·6e74·6963·6174·652e··+\!authenticate. | |||
| 0003ee90:·2a24·290a·2020·2020·7265·706c·6163·653a··*$).····replace: | |||
| 0003eea0:·2027·2320·5c67·266c·743b·3126·6774·3b27···'#·\g<1>' | |||
| 0003eeb0:·0a20·2020·2070·6174·683a·2027·7b7b·2069··.····path:·'{{·i | |||
| 0003eec0:·7465·6d2e·7061·7468·207d·7d27·0a20·2020··tem.path·}}'.··· | |||
| 0003eed0:·2076·616c·6964·6174·653a·202f·7573·722f···validate:·/usr/ | |||
| 0003eee0:·7362·696e·2f76·6973·7564·6f20·2d63·6620··sbin/visudo·-cf· | |||
| 0003eef0:·2573·0a20·2077·6974·685f·6974·656d·733a··%s.··with_items: | |||
| 0003ef00:·0a20·202d·2070·6174·683a·202f·6574·632f··.··-·path:·/etc/ | |||
| 0003ef10:·7375·646f·6572·730a·2020·2d20·277b·7b20··sudoers.··-·'{{· | |||
| 0003ef20:·7375·646f·6572·732e·6669·6c65·7320·7d7d··sudoers.files·}} | |||
| Max diff block lines reached; 1165922/1184718 bytes (98.41%) of diff not shown. | |||
| Offset 236, 14 lines modified | Offset 236, 35 lines modified | ||
| 236 | ···························1.7,·SR·1.8,·SR·1.9 | 236 | ···························1.7,·SR·1.8,·SR·1.9 |
| 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 237 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 238 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 239 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 240 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 242 | ···························SRG-OS-000373-GPOS-00158 | 242 | ···························SRG-OS-000373-GPOS-00158 |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 248 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 249 | ··if·[·!·-e·"$f"·]·;·then | ||
| 250 | ····continue | ||
| 251 | ··fi | ||
| 252 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 253 | ··if·!·test·-z·"$matching_list";·then | ||
| 254 | ····while·IFS=·read·-r·entry;·do | ||
| 255 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 256 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 257 | ····done·<<<·"$matching_list" | ||
| 258 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 259 | visudo" | ||
| 260 | ··fi | ||
| 261 | done | ||
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 248 | -·name:·Find·/etc/sudoers.d/·files | 267 | -·name:·Find·/etc/sudoers.d/·files |
| 249 | ··ansible.builtin.find: | 268 | ··ansible.builtin.find: |
| Offset 274, 35 lines modified | Offset 295, 14 lines modified | ||
| 274 | ··-·NIST-800-53-IA-11 | 295 | ··-·NIST-800-53-IA-11 |
| 275 | ··-·low_complexity | 296 | ··-·low_complexity |
| 276 | ··-·low_disruption | 297 | ··-·low_disruption |
| 277 | ··-·medium_severity | 298 | ··-·medium_severity |
| 278 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 280 | ··-·sudo_remove_no_authenticate | 301 | ··-·sudo_remove_no_authenticate |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 286 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 287 | ··if·[·!·-e·"$f"·]·;·then | ||
| 288 | ····continue | ||
| 289 | ··fi | ||
| 290 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 291 | ··if·!·test·-z·"$matching_list";·then | ||
| 292 | ····while·IFS=·read·-r·entry;·do | ||
| 293 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 294 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 295 | ····done·<<<·"$matching_list" | ||
| 296 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 297 | visudo" | ||
| 298 | ··fi | ||
| 299 | done | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 304 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 305 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 306 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 307 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 306 | ············Without·re-authentication,·users·may·access·resources·or·perform | 308 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 323, 14 lines modified | Offset 323, 35 lines modified | ||
| 323 | ···························1.7,·SR·1.8,·SR·1.9 | 323 | ···························1.7,·SR·1.8,·SR·1.9 |
| 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 324 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 325 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 328 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 329 | ···························SRG-OS-000373-GPOS-00158 | 329 | ···························SRG-OS-000373-GPOS-00158 |
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 335 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 336 | ··if·[·!·-e·"$f"·]·;·then | ||
| 337 | ····continue | ||
| 338 | ··fi | ||
| 339 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 340 | ··if·!·test·-z·"$matching_list";·then | ||
| 341 | ····while·IFS=·read·-r·entry;·do | ||
| 342 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 343 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 344 | ····done·<<<·"$matching_list" | ||
| 345 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 346 | visudo" | ||
| 347 | ··fi | ||
| 348 | done | ||
| 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 331 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 332 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 333 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 334 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 335 | -·name:·Find·/etc/sudoers.d/·files | 354 | -·name:·Find·/etc/sudoers.d/·files |
| 336 | ··ansible.builtin.find: | 355 | ··ansible.builtin.find: |
| Offset 361, 35 lines modified | Offset 382, 14 lines modified | ||
| 361 | ··-·NIST-800-53-IA-11 | 382 | ··-·NIST-800-53-IA-11 |
| 362 | ··-·low_complexity | 383 | ··-·low_complexity |
| 363 | ··-·low_disruption | 384 | ··-·low_disruption |
| 364 | ··-·medium_severity | 385 | ··-·medium_severity |
| 365 | ··-·no_reboot_needed | 386 | ··-·no_reboot_needed |
| 366 | ··-·restrict_strategy | 387 | ··-·restrict_strategy |
| 367 | ··-·sudo_remove_nopasswd | 388 | ··-·sudo_remove_nopasswd |
| 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 373 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 374 | ··if·[·!·-e·"$f"·]·;·then | ||
| 375 | ····continue | ||
| 376 | ··fi | ||
| 377 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 378 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139135/144583 bytes (96.23%) of diff not shown. | |||
| Offset 14774, 147 lines modified | Offset 14774, 147 lines modified | ||
| 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00039b50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039b60:·743d·2223·6964·6d31·3939·3022·2074·6162··t="#idm1990"·tab | 00039b60:·743d·2223·6964·6d31·3939·3022·2074·6162··t="#idm1990"·tab | ||
| 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00039b70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00039b80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00039b90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00039ba0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00039bb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00039bc0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 00039bd0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 00039be0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00039bf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00039c00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00039c10:·6964·6d31·3939·3022·3e3c·7461·626c·6520··idm1990"><table· | |||
| 00039c20:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039c30:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039c40:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039c50:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039c60:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039c70:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039c80:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c90:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039ca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039cb0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039cc0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039cd0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039ce0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00039cf0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00039d00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039d10:·6465·3e0a·666f·7220·6620·696e·202f·6574··de>.for·f·in·/et | |||
| 00039d20:·632f·7375·646f·6572·7320·2f65·7463·2f73··c/sudoers·/etc/s | |||
| 00039d30:·7564·6f65·7273·2e64·2f2a·203b·2064·6f0a··udoers.d/*·;·do. | |||
| 00039d40:·2020·6966·205b·2021·202d·6520·2224·6622····if·[·!·-e·"$f" | |||
| 00039d50:·205d·203b·2074·6865·6e0a·2020·2020·636f···]·;·then.····co | |||
| 00039d60:·6e74·696e·7565·0a20·2066·690a·2020·6d61··ntinue.··fi.··ma | |||
| 00039d70:·7463·6869·6e67·5f6c·6973·743d·2428·6772··tching_list=$(gr | |||
| 00039d80:·6570·202d·5020·275e·283f·2123·292e·2a5b··ep·-P·'^(?!#).*[ | |||
| 00039d90:·5c73·5d2b·5c21·6175·7468·656e·7469·6361··\s]+\!authentica | |||
| 00039da0:·7465·2e2a·2427·2024·6620·7c20·756e·6971··te.*$'·$f·|·uniq | |||
| 00039db0:·2029·0a20·2069·6620·2120·7465·7374·202d···).··if·!·test·- | |||
| 00039dc0:·7a20·2224·6d61·7463·6869·6e67·5f6c·6973··z·"$matching_lis | |||
| 00039dd0:·7422·3b20·7468·656e·0a20·2020·2077·6869··t";·then.····whi | |||
| 00039de0:·6c65·2049·4653·3d20·7265·6164·202d·7220··le·IFS=·read·-r· | |||
| 00039df0:·656e·7472·793b·2064·6f0a·2020·2020·2020··entry;·do.······ | |||
| 00039e00:·2320·636f·6d6d·656e·7420·6f75·7420·2221··#·comment·out·"! | |||
| 00039e10:·6175·7468·656e·7469·6361·7465·2220·6d61··authenticate"·ma | |||
| 00039e20:·7463·6865·7320·746f·2070·7265·7365·7276··tches·to·preserv | |||
| 00039e30:·6520·7573·6572·2064·6174·610a·2020·2020··e·user·data.···· | |||
| 00039e40:·2020·7365·6420·2d69·2022·732f·5e24·7b65····sed·-i·"s/^${e | |||
| 00039e50:·6e74·7279·7d24·2f23·2026·616d·703b·2f67··ntry}$/#·&/g | |||
| 00039e60:·2220·2466·0a20·2020·2064·6f6e·6520·266c··"·$f.····done·&l | |||
| 00039e70:·743b·266c·743b·266c·743b·2022·246d·6174··t;<<·"$mat | |||
| 00039e80:·6368·696e·675f·6c69·7374·220a·0a20·2020··ching_list"..··· | |||
| 00039e90:·202f·7573·722f·7362·696e·2f76·6973·7564···/usr/sbin/visud | |||
| 00039ea0:·6f20·2d63·6620·2466·2026·616d·703b·2667··o·-cf·$f·&&g | |||
| 00039eb0:·743b·202f·6465·762f·6e75·6c6c·207c·7c20··t;·/dev/null·||· | |||
| 00039ec0:·6563·686f·2022·4661·696c·2074·6f20·7661··echo·"Fail·to·va | |||
| 00039ed0:·6c69·6461·7465·2024·6620·7769·7468·2076··lidate·$f·with·v | |||
| 00039ee0:·6973·7564·6f22·0a20·2066·690a·646f·6e65··isudo".··fi.done | |||
| 00039ef0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039f00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039f10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039f20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039f30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00039f40:·743d·2223·6964·6d31·3939·3122·2074·6162··t="#idm1991"·tab | |||
| 00039f50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039f60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039f70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039f80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039f90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039 | 00039fa0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00039 | 00039fb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00039 | 00039fc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039fd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039fe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039c10:·643d·2269·646d·3139·3930·223e·3c74·6162··d="idm1990"><tab | |||
| 00039c20:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039c30:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039c40:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039c50:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039c60:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039c70:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039c80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039c90:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039ca0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039cc0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039cd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039ce0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039cf0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00039d00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00039d10:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4669··<code>-·name:·Fi | |||
| 00039d20:·6e64·202f·6574·632f·7375·646f·6572·732e··nd·/etc/sudoers. | |||
| 00039d30:·642f·2066·696c·6573·0a20·2061·6e73·6962··d/·files.··ansib | |||
| 00039d40:·6c65·2e62·7569·6c74·696e·2e66·696e·643a··le.builtin.find: | |||
| 00039d50:·0a20·2020·2070·6174·6873·3a0a·2020·2020··.····paths:.···· | |||
| 00039d60:·2d20·2f65·7463·2f73·7564·6f65·7273·2e64··-·/etc/sudoers.d | |||
| 00039d70:·2f0a·2020·7265·6769·7374·6572·3a20·7375··/.··register:·su | |||
| 00039d80:·646f·6572·730a·2020·7461·6773·3a0a·2020··doers.··tags:.·· | |||
| 00039d90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00039da0:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·4941·2d31·310a·2020·2d20··00-53-IA-11.··-· | |||
| 00039dc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00039dd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00039de0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 00039df0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 00039e00:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | |||
| 00039e10:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | |||
| 00039e20:·0a20·202d·2073·7564·6f5f·7265·6d6f·7665··.··-·sudo_remove | |||
| 00039e30:·5f6e·6f5f·6175·7468·656e·7469·6361·7465··_no_authenticate | |||
| 00039e40:·0a0a·2d20·6e61·6d65·3a20·5265·6d6f·7665··..-·name:·Remove | |||
| 00039e50:·206c·696e·6573·2063·6f6e·7461·696e·696e···lines·containin | |||
| 00039e60:·6720·2161·7574·6865·6e74·6963·6174·6520··g·!authenticate· | |||
| 00039e70:·6672·6f6d·2073·7564·6f65·7273·2066·696c··from·sudoers·fil | |||
| 00039e80:·6573·0a20·2061·6e73·6962·6c65·2e62·7569··es.··ansible.bui | |||
| 00039e90:·6c74·696e·2e72·6570·6c61·6365·3a0a·2020··ltin.replace:.·· | |||
| 00039ea0:·2020·7265·6765·7870·3a20·285e·283f·2123····regexp:·(^(?!# | |||
| 00039eb0:·292e·2a5b·5c73·5d2b·5c21·6175·7468·656e··).*[\s]+\!authen | |||
| 00039ec0:·7469·6361·7465·2e2a·2429·0a20·2020·2072··ticate.*$).····r | |||
| 00039ed0:·6570·6c61·6365·3a20·2723·205c·6726·6c74··eplace:·'#·\g< | |||
| 00039ee0:·3b31·2667·743b·270a·2020·2020·7061·7468··;1>'.····path | |||
| 00039ef0:·3a20·277b·7b20·6974·656d·2e70·6174·6820··:·'{{·item.path· | |||
| 00039f00:·7d7d·270a·2020·2020·7661·6c69·6461·7465··}}'.····validate | |||
| 00039f10:·3a20·2f75·7372·2f73·6269·6e2f·7669·7375··:·/usr/sbin/visu | |||
| 00039f20:·646f·202d·6366·2025·730a·2020·7769·7468··do·-cf·%s.··with | |||
| 00039f30:·5f69·7465·6d73·3a0a·2020·2d20·7061·7468··_items:.··-·path | |||
| 00039f40:·3a20·2f65·7463·2f73·7564·6f65·7273·0a20··:·/etc/sudoers.· | |||
| 00039f50:·202d·2027·7b7b·2073·7564·6f65·7273·2e66···-·'{{·sudoers.f | |||
| Max diff block lines reached; 274268/293202 bytes (93.54%) of diff not shown. | |||
| Offset 90, 14 lines modified | Offset 90, 35 lines modified | ||
| 90 | ···························1.7,·SR·1.8,·SR·1.9 | 90 | ···························1.7,·SR·1.8,·SR·1.9 |
| 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 91 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 92 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 93 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 94 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 96 | ···························SRG-OS-000373-GPOS-00158 | 96 | ···························SRG-OS-000373-GPOS-00158 |
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 102 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 103 | ··if·[·!·-e·"$f"·]·;·then | ||
| 104 | ····continue | ||
| 105 | ··fi | ||
| 106 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 107 | ··if·!·test·-z·"$matching_list";·then | ||
| 108 | ····while·IFS=·read·-r·entry;·do | ||
| 109 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 110 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 111 | ····done·<<<·"$matching_list" | ||
| 112 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 113 | visudo" | ||
| 114 | ··fi | ||
| 115 | done | ||
| 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 102 | -·name:·Find·/etc/sudoers.d/·files | 121 | -·name:·Find·/etc/sudoers.d/·files |
| 103 | ··ansible.builtin.find: | 122 | ··ansible.builtin.find: |
| Offset 128, 35 lines modified | Offset 149, 14 lines modified | ||
| 128 | ··-·NIST-800-53-IA-11 | 149 | ··-·NIST-800-53-IA-11 |
| 129 | ··-·low_complexity | 150 | ··-·low_complexity |
| 130 | ··-·low_disruption | 151 | ··-·low_disruption |
| 131 | ··-·medium_severity | 152 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 133 | ··-·restrict_strategy | 154 | ··-·restrict_strategy |
| 134 | ··-·sudo_remove_no_authenticate | 155 | ··-·sudo_remove_no_authenticate |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 140 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 141 | ··if·[·!·-e·"$f"·]·;·then | ||
| 142 | ····continue | ||
| 143 | ··fi | ||
| 144 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 145 | ··if·!·test·-z·"$matching_list";·then | ||
| 146 | ····while·IFS=·read·-r·entry;·do | ||
| 147 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 148 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 149 | ····done·<<<·"$matching_list" | ||
| 150 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 151 | visudo" | ||
| 152 | ··fi | ||
| 153 | done | ||
| 154 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 155 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 157 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 156 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 158 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 157 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 159 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 158 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 160 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 159 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 161 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 160 | ············Without·re-authentication,·users·may·access·resources·or·perform | 162 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 177, 14 lines modified | Offset 177, 35 lines modified | ||
| 177 | ···························1.7,·SR·1.8,·SR·1.9 | 177 | ···························1.7,·SR·1.8,·SR·1.9 |
| 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 178 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 179 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 180 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 181 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 182 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 183 | ···························SRG-OS-000373-GPOS-00158 | 183 | ···························SRG-OS-000373-GPOS-00158 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 189 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 190 | ··if·[·!·-e·"$f"·]·;·then | ||
| 191 | ····continue | ||
| 192 | ··fi | ||
| 193 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 194 | ··if·!·test·-z·"$matching_list";·then | ||
| 195 | ····while·IFS=·read·-r·entry;·do | ||
| 196 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 197 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 198 | ····done·<<<·"$matching_list" | ||
| 199 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 200 | visudo" | ||
| 201 | ··fi | ||
| 202 | done | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 189 | -·name:·Find·/etc/sudoers.d/·files | 208 | -·name:·Find·/etc/sudoers.d/·files |
| 190 | ··ansible.builtin.find: | 209 | ··ansible.builtin.find: |
| Offset 215, 35 lines modified | Offset 236, 14 lines modified | ||
| 215 | ··-·NIST-800-53-IA-11 | 236 | ··-·NIST-800-53-IA-11 |
| 216 | ··-·low_complexity | 237 | ··-·low_complexity |
| 217 | ··-·low_disruption | 238 | ··-·low_disruption |
| 218 | ··-·medium_severity | 239 | ··-·medium_severity |
| 219 | ··-·no_reboot_needed | 240 | ··-·no_reboot_needed |
| 220 | ··-·restrict_strategy | 241 | ··-·restrict_strategy |
| 221 | ··-·sudo_remove_nopasswd | 242 | ··-·sudo_remove_nopasswd |
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 227 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 228 | ··if·[·!·-e·"$f"·]·;·then | ||
| 229 | ····continue | ||
| 230 | ··fi | ||
| 231 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 232 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 34899/40356 bytes (86.48%) of diff not shown. | |||
| Offset 16042, 146 lines modified | Offset 16042, 146 lines modified | ||
| 0003ea90:·6574·3d22·2369·646d·3139·3930·2220·7461··et="#idm1990"·ta | 0003ea90:·6574·3d22·2369·646d·3139·3930·2220·7461··et="#idm1990"·ta | ||
| 0003eaa0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003eaa0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003eab0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003eab0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003eac0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003eac0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003ead0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003ead0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003eae0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003eae0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003eaf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003eaf0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003eb00:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003eb10:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003eb20:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003eb30:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003eb40:·2269·646d·3139·3930·223e·3c74·6162·6c65··"idm1990"><table | |||
| 0003eb50:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003eb60:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003eb70:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003eb80:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003eb90:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003eba0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ebb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ebc0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003ebd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ebe0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ebf0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ec00:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ec10:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003ec20:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ec30:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ec40:·6f64·653e·0a66·6f72·2066·2069·6e20·2f65··ode>.for·f·in·/e | |||
| 0003ec50:·7463·2f73·7564·6f65·7273·202f·6574·632f··tc/sudoers·/etc/ | |||
| 0003ec60:·7375·646f·6572·732e·642f·2a20·3b20·646f··sudoers.d/*·;·do | |||
| 0003ec70:·0a20·2069·6620·5b20·2120·2d65·2022·2466··.··if·[·!·-e·"$f | |||
| 0003ec80:·2220·5d20·3b20·7468·656e·0a20·2020·2063··"·]·;·then.····c | |||
| 0003ec90:·6f6e·7469·6e75·650a·2020·6669·0a20·206d··ontinue.··fi.··m | |||
| 0003eca0:·6174·6368·696e·675f·6c69·7374·3d24·2867··atching_list=$(g | |||
| 0003ecb0:·7265·7020·2d50·2027·5e28·3f21·2329·2e2a··rep·-P·'^(?!#).* | |||
| 0003ecc0:·5b5c·735d·2b5c·2161·7574·6865·6e74·6963··[\s]+\!authentic | |||
| 0003ecd0:·6174·652e·2a24·2720·2466·207c·2075·6e69··ate.*$'·$f·|·uni | |||
| 0003ece0:·7120·290a·2020·6966·2021·2074·6573·7420··q·).··if·!·test· | |||
| 0003ecf0:·2d7a·2022·246d·6174·6368·696e·675f·6c69··-z·"$matching_li | |||
| 0003ed00:·7374·223b·2074·6865·6e0a·2020·2020·7768··st";·then.····wh | |||
| 0003ed10:·696c·6520·4946·533d·2072·6561·6420·2d72··ile·IFS=·read·-r | |||
| 0003ed20:·2065·6e74·7279·3b20·646f·0a20·2020·2020···entry;·do.····· | |||
| 0003ed30:·2023·2063·6f6d·6d65·6e74·206f·7574·2022···#·comment·out·" | |||
| 0003ed40:·2161·7574·6865·6e74·6963·6174·6522·206d··!authenticate"·m | |||
| 0003ed50:·6174·6368·6573·2074·6f20·7072·6573·6572··atches·to·preser | |||
| 0003ed60:·7665·2075·7365·7220·6461·7461·0a20·2020··ve·user·data.··· | |||
| 0003ed70:·2020·2073·6564·202d·6920·2273·2f5e·247b·····sed·-i·"s/^${ | |||
| 0003ed80:·656e·7472·797d·242f·2320·2661·6d70·3b2f··entry}$/#·&/ | |||
| 0003ed90:·6722·2024·660a·2020·2020·646f·6e65·2026··g"·$f.····done·& | |||
| 0003eda0:·6c74·3b26·6c74·3b26·6c74·3b20·2224·6d61··lt;<<·"$ma | |||
| 0003edb0:·7463·6869·6e67·5f6c·6973·7422·0a0a·2020··tching_list"..·· | |||
| 0003edc0:·2020·2f75·7372·2f73·6269·6e2f·7669·7375····/usr/sbin/visu | |||
| 0003edd0:·646f·202d·6366·2024·6620·2661·6d70·3b26··do·-cf·$f·&& | |||
| 0003ede0:·6774·3b20·2f64·6576·2f6e·756c·6c20·7c7c··gt;·/dev/null·|| | |||
| 0003edf0:·2065·6368·6f20·2246·6169·6c20·746f·2076···echo·"Fail·to·v | |||
| 0003ee00:·616c·6964·6174·6520·2466·2077·6974·6820··alidate·$f·with· | |||
| 0003ee10:·7669·7375·646f·220a·2020·6669·0a64·6f6e··visudo".··fi.don | |||
| 0003ee20:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003ee30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ee40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ee50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ee60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ee70:·6574·3d22·2369·646d·3139·3931·2220·7461··et="#idm1991"·ta | |||
| 0003ee80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ee90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003eea0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003eeb0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003eec0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003eed0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003e | 0003eee0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003e | 0003eef0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003eb20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003eb30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003eb40:·6964·3d22·6964·6d31·3939·3022·3e3c·7461··id="idm1990"><ta | |||
| 0003eb50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003eb60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003eb70:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003eb80:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003eb90:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003eba0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003ebb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ebc0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003ebd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ebe0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003ebf0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003ec00:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ec10:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ec20:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003ec30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ec40:·3e3c·636f·6465·3e2d·206e·616d·653a·2046··><code>-·name:·F | |||
| 0003ec50:·696e·6420·2f65·7463·2f73·7564·6f65·7273··ind·/etc/sudoers | |||
| 0003ec60:·2e64·2f20·6669·6c65·730a·2020·616e·7369··.d/·files.··ansi | |||
| 0003ec70:·626c·652e·6275·696c·7469·6e2e·6669·6e64··ble.builtin.find | |||
| 0003ec80:·3a0a·2020·2020·7061·7468·733a·0a20·2020··:.····paths:.··· | |||
| 0003ec90:·202d·202f·6574·632f·7375·646f·6572·732e···-·/etc/sudoers. | |||
| 0003eca0:·642f·0a20·2072·6567·6973·7465·723a·2073··d/.··register:·s | |||
| 0003ecb0:·7564·6f65·7273·0a20·2074·6167·733a·0a20··udoers.··tags:.· | |||
| 0003ecc0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003ecd0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003ece0:·3830·302d·3533·2d49·412d·3131·0a20·202d··800-53-IA-11.··- | |||
| 0003ecf0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003ed00:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003ed10:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003ed20:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003ed30:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003ed40:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | |||
| 0003ed50:·790a·2020·2d20·7375·646f·5f72·656d·6f76··y.··-·sudo_remov | |||
| 0003ed60:·655f·6e6f·5f61·7574·6865·6e74·6963·6174··e_no_authenticat | |||
| 0003ed70:·650a·0a2d·206e·616d·653a·2052·656d·6f76··e..-·name:·Remov | |||
| 0003ed80:·6520·6c69·6e65·7320·636f·6e74·6169·6e69··e·lines·containi | |||
| 0003ed90:·6e67·2021·6175·7468·656e·7469·6361·7465··ng·!authenticate | |||
| 0003eda0:·2066·726f·6d20·7375·646f·6572·7320·6669···from·sudoers·fi | |||
| 0003edb0:·6c65·730a·2020·616e·7369·626c·652e·6275··les.··ansible.bu | |||
| 0003edc0:·696c·7469·6e2e·7265·706c·6163·653a·0a20··iltin.replace:.· | |||
| 0003edd0:·2020·2072·6567·6578·703a·2028·5e28·3f21·····regexp:·(^(?! | |||
| 0003ede0:·2329·2e2a·5b5c·735d·2b5c·2161·7574·6865··#).*[\s]+\!authe | |||
| 0003edf0:·6e74·6963·6174·652e·2a24·290a·2020·2020··nticate.*$).···· | |||
| 0003ee00:·7265·706c·6163·653a·2027·2320·5c67·266c··replace:·'#·\g&l | |||
| 0003ee10:·743b·3126·6774·3b27·0a20·2020·2070·6174··t;1>'.····pat | |||
| 0003ee20:·683a·2027·7b7b·2069·7465·6d2e·7061·7468··h:·'{{·item.path | |||
| 0003ee30:·207d·7d27·0a20·2020·2076·616c·6964·6174···}}'.····validat | |||
| 0003ee40:·653a·202f·7573·722f·7362·696e·2f76·6973··e:·/usr/sbin/vis | |||
| 0003ee50:·7564·6f20·2d63·6620·2573·0a20·2077·6974··udo·-cf·%s.··wit | |||
| 0003ee60:·685f·6974·656d·733a·0a20·202d·2070·6174··h_items:.··-·pat | |||
| 0003ee70:·683a·202f·6574·632f·7375·646f·6572·730a··h:·/etc/sudoers. | |||
| 0003ee80:·2020·2d20·277b·7b20·7375·646f·6572·732e····-·'{{·sudoers. | |||
| 0003ee90:·6669·6c65·7320·7d7d·270a·2020·7461·6773··files·}}'.··tags | |||
| Max diff block lines reached; 1166155/1184951 bytes (98.41%) of diff not shown. | |||
| Offset 234, 14 lines modified | Offset 234, 35 lines modified | ||
| 234 | ···························1.7,·SR·1.8,·SR·1.9 | 234 | ···························1.7,·SR·1.8,·SR·1.9 |
| 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 235 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 236 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 237 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 239 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 240 | ···························SRG-OS-000373-GPOS-00158 | 240 | ···························SRG-OS-000373-GPOS-00158 |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 246 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 247 | ··if·[·!·-e·"$f"·]·;·then | ||
| 248 | ····continue | ||
| 249 | ··fi | ||
| 250 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 251 | ··if·!·test·-z·"$matching_list";·then | ||
| 252 | ····while·IFS=·read·-r·entry;·do | ||
| 253 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 254 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 255 | ····done·<<<·"$matching_list" | ||
| 256 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 257 | visudo" | ||
| 258 | ··fi | ||
| 259 | done | ||
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 246 | -·name:·Find·/etc/sudoers.d/·files | 265 | -·name:·Find·/etc/sudoers.d/·files |
| 247 | ··ansible.builtin.find: | 266 | ··ansible.builtin.find: |
| Offset 272, 35 lines modified | Offset 293, 14 lines modified | ||
| 272 | ··-·NIST-800-53-IA-11 | 293 | ··-·NIST-800-53-IA-11 |
| 273 | ··-·low_complexity | 294 | ··-·low_complexity |
| 274 | ··-·low_disruption | 295 | ··-·low_disruption |
| 275 | ··-·medium_severity | 296 | ··-·medium_severity |
| 276 | ··-·no_reboot_needed | 297 | ··-·no_reboot_needed |
| 277 | ··-·restrict_strategy | 298 | ··-·restrict_strategy |
| 278 | ··-·sudo_remove_no_authenticate | 299 | ··-·sudo_remove_no_authenticate |
| 279 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 280 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 281 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 282 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 283 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 284 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 285 | ··if·[·!·-e·"$f"·]·;·then | ||
| 286 | ····continue | ||
| 287 | ··fi | ||
| 288 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 289 | ··if·!·test·-z·"$matching_list";·then | ||
| 290 | ····while·IFS=·read·-r·entry;·do | ||
| 291 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 292 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 293 | ····done·<<<·"$matching_list" | ||
| 294 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 295 | visudo" | ||
| 296 | ··fi | ||
| 297 | done | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 299 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 300 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 302 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 301 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 303 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 302 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 304 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 303 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 305 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 304 | ············Without·re-authentication,·users·may·access·resources·or·perform | 306 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 321, 14 lines modified | Offset 321, 35 lines modified | ||
| 321 | ···························1.7,·SR·1.8,·SR·1.9 | 321 | ···························1.7,·SR·1.8,·SR·1.9 |
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 323 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 327 | ···························SRG-OS-000373-GPOS-00158 | 327 | ···························SRG-OS-000373-GPOS-00158 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 334 | ··if·[·!·-e·"$f"·]·;·then | ||
| 335 | ····continue | ||
| 336 | ··fi | ||
| 337 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 338 | ··if·!·test·-z·"$matching_list";·then | ||
| 339 | ····while·IFS=·read·-r·entry;·do | ||
| 340 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 341 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 342 | ····done·<<<·"$matching_list" | ||
| 343 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 344 | visudo" | ||
| 345 | ··fi | ||
| 346 | done | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Find·/etc/sudoers.d/·files | 352 | -·name:·Find·/etc/sudoers.d/·files |
| 334 | ··ansible.builtin.find: | 353 | ··ansible.builtin.find: |
| Offset 359, 35 lines modified | Offset 380, 14 lines modified | ||
| 359 | ··-·NIST-800-53-IA-11 | 380 | ··-·NIST-800-53-IA-11 |
| 360 | ··-·low_complexity | 381 | ··-·low_complexity |
| 361 | ··-·low_disruption | 382 | ··-·low_disruption |
| 362 | ··-·medium_severity | 383 | ··-·medium_severity |
| 363 | ··-·no_reboot_needed | 384 | ··-·no_reboot_needed |
| 364 | ··-·restrict_strategy | 385 | ··-·restrict_strategy |
| 365 | ··-·sudo_remove_nopasswd | 386 | ··-·sudo_remove_nopasswd |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 371 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 372 | ··if·[·!·-e·"$f"·]·;·then | ||
| 373 | ····continue | ||
| 374 | ··fi | ||
| 375 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 376 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 139081/144529 bytes (96.23%) of diff not shown. | |||
| Offset 16680, 181 lines modified | Offset 16680, 181 lines modified | ||
| 00041270:·6574·3d22·2369·646d·3638·3836·2220·7461··et="#idm6886"·ta | 00041270:·6574·3d22·2369·646d·3638·3836·2220·7461··et="#idm6886"·ta | ||
| 00041280:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00041280:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00041290:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00041290:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 000412a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 000412a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000412b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000412b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000412c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000412c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 000412d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000412d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000412e0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 000412f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00041300:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00041310:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041320:·2269·646d·3638·3836·223e·3c74·6162·6c65··"idm6886"><table | |||
| 00041330:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041340:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041350:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041360:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041370:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041380:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00041390:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000413a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000413b0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 000413c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000413d0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 000413e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 000413f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00041400:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 00041410:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00041420:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 00041430:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 00041440:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 00041450:·2070·6c61·7466·6f72·6d73·0a69·6620·6470···platforms.if·dp | |||
| 00041460:·6b67·2d71·7565·7279·202d·2d73·686f·7720··kg-query·--show· | |||
| 00041470:·2d2d·7368·6f77·666f·726d·6174·3d27·247b··--showformat='${ | |||
| 00041480:·6462·3a53·7461·7475·732d·5374·6174·7573··db:Status-Status | |||
| 000412e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000412f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00041300:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00041310:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00041320:·6964·3d22·6964·6d36·3838·3622·3e3c·7461··id="idm6886"><ta | |||
| 00041330:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00041340:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00041350:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00041360:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00041370:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00041380:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00041390:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000413a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000413b0:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 000413c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 000413d0:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 000413e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000413f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00041400:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | |||
| 00041410:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00041420:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 00041430:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 00041440:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 00041450:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 00041460:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 00041470:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041480:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041490:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 000414a0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 000414b0:·2d35·332d·434d·2d37·2862·290a·2020·2d20··-53-CM-7(b).··-· | |||
| 000414c0:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 000414d0:·0a20·202d·206b·6572·6e65·6c5f·6d6f·6475··.··-·kernel_modu | |||
| 000414e0:·6c65·5f72·6473·5f64·6973·6162·6c65·640a··le_rds_disabled. | |||
| 000414f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 00041500:·7479·0a20·202d·206c·6f77·5f73·6576·6572··ty.··-·low_sever | |||
| 00041510:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 00041520:·6973·7275·7074·696f·6e0a·2020·2d20·7265··isruption.··-·re | |||
| 00041530:·626f·6f74·5f72·6571·7569·7265·640a·0a2d··boot_required..- | |||
| 00041540:·206e·616d·653a·2045·6e73·7572·6520·6b65···name:·Ensure·ke | |||
| 00041550:·726e·656c·206d·6f64·756c·6520·2772·6473··rnel·module·'rds | |||
| 00041560:·2720·6973·2064·6973·6162·6c65·640a·2020··'·is·disabled.·· | |||
| 00041570:·6c69·6e65·696e·6669·6c65·3a0a·2020·2020··lineinfile:.···· | |||
| 00041580:·6372·6561·7465·3a20·7472·7565·0a20·2020··create:·true.··· | |||
| 00041590:·2064·6573·743a·202f·6574·632f·6d6f·6470···dest:·/etc/modp | |||
| 000415a0:·726f·6265·2e64·2f72·6473·2e63·6f6e·660a··robe.d/rds.conf. | |||
| 000415b0:·2020·2020·7265·6765·7870·3a20·696e·7374······regexp:·inst | |||
| 000415c0:·616c·6c5c·732b·7264·730a·2020·2020·6c69··all\s+rds.····li | |||
| 000415d0:·6e65·3a20·696e·7374·616c·6c20·7264·7320··ne:·install·rds· | |||
| 000415e0:·2f62·696e·2f66·616c·7365·0a20·2077·6865··/bin/false.··whe | |||
| 00041 | 00041490:·7d0a·2720·276c·696e·7578·2d62·6173·6527··}.'·'linux-base' | ||
| 000414a0:·2032·2667·743b·2f64·6576·2f6e·756c·6c20···2>/dev/null· | |||
| 000414b0:·7c20·6772·6570·202d·7120·5e69·6e73·7461··|·grep·-q·^insta | |||
| 000414c0:·6c6c·6564·3b20·7468·656e·0a0a·6966·204c··lled;·then..if·L | |||
| 000414d0:·435f·414c·4c3d·4320·6772·6570·202d·7120··C_ALL=C·grep·-q· | |||
| 000414e0:·2d6d·2031·2022·5e69·6e73·7461·6c6c·2072··-m·1·"^install·r | |||
| 000414f0:·6473·2220·2f65·7463·2f6d·6f64·7072·6f62··ds"·/etc/modprob | |||
| 00041500:·652e·642f·7264·732e·636f·6e66·203b·2074··e.d/rds.conf·;·t | |||
| 00041510:·6865·6e0a·090a·0973·6564·202d·6920·2773··hen....sed·-i·'s | |||
| 00041520:·235e·696e·7374·616c·6c20·7264·732e·2a23··#^install·rds.*# | |||
| 00041530:·696e·7374·616c·6c20·7264·7320·2f62·696e··install·rds·/bin | |||
| 00041540:·2f66·616c·7365·2367·2720·2f65·7463·2f6d··/false#g'·/etc/m | |||
| 00041600:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00041610:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 00041620:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 00041630:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041640:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 00041650:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 00041660:·2d35·332d·434d·2d37·2862·290a·2020·2d20··-53-CM-7(b).··-· | |||
| 00041670:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 00041680:·0a20·202d·206b·6572·6e65·6c5f·6d6f·6475··.··-·kernel_modu | |||
| 00041690:·6c65·5f72·6473·5f64·6973·6162·6c65·640a··le_rds_disabled. | |||
| 000416a0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 000416b0:·7479·0a20·202d·206c·6f77·5f73·6576·6572··ty.··-·low_sever | |||
| 000416c0:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | |||
| 000416d0:·6973·7275·7074·696f·6e0a·2020·2d20·7265··isruption.··-·re | |||
| 000416e0:·626f·6f74·5f72·6571·7569·7265·640a·0a2d··boot_required..- | |||
| 000416f0:·206e·616d·653a·2045·6e73·7572·6520·6b65···name:·Ensure·ke | |||
| 00041700:·726e·656c·206d·6f64·756c·6520·2772·6473··rnel·module·'rds | |||
| 00041710:·2720·6973·2062·6c61·636b·6c69·7374·6564··'·is·blacklisted | |||
| 00041720:·0a20·206c·696e·6569·6e66·696c·653a·0a20··.··lineinfile:.· | |||
| 00041730:·2020·2063·7265·6174·653a·2074·7275·650a·····create:·true. | |||
| 00041740:·2020·2020·6465·7374·3a20·2f65·7463·2f6d······dest:·/etc/m | |||
| 00041 | 00041550:·6f64·7072·6f62·652e·642f·7264·732e·636f··odprobe.d/rds.co | ||
| 00041560:·6e66·0a65·6c73·650a·0965·6368·6f20·2d65··nf.else..echo·-e | |||
| 00041570:·2022·5c6e·2320·4469·7361·626c·6520·7065···"\n#·Disable·pe | |||
| 00041580:·7220·7365·6375·7269·7479·2072·6571·7569··r·security·requi | |||
| 00041590:·7265·6d65·6e74·7322·2026·6774·3b26·6774··rements"·>> | |||
| 000415a0:·3b20·2f65·7463·2f6d·6f64·7072·6f62·652e··;·/etc/modprobe. | |||
| 000415b0:·642f·7264·732e·636f·6e66·0a09·6563·686f··d/rds.conf..echo | |||
| 000415c0:·2022·696e·7374·616c·6c20·7264·7320·2f62···"install·rds·/b | |||
| 000415d0:·696e·2f66·616c·7365·2220·2667·743b·2667··in/false"·>&g | |||
| 000415e0:·743b·202f·6574·632f·6d6f·6470·726f·6265··t;·/etc/modprobe | |||
| 000415f0:·2e64·2f72·6473·2e63·6f6e·660a·6669·0a0a··.d/rds.conf.fi.. | |||
| Max diff block lines reached; 1771131/1794757 bytes (98.68%) of diff not shown. | |||
| Offset 304, 14 lines modified | Offset 304, 38 lines modified | ||
| 304 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR | 304 | ···························SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR |
| 305 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR | 305 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR |
| 306 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 306 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 307 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 307 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 308 | ···························A.9.1.2 | 308 | ···························A.9.1.2 |
| 309 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 309 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 310 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 310 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 314 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 315 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 316 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 317 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 318 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 319 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 320 | » | ||
| 321 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 322 | else | ||
| 323 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 324 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 325 | fi | ||
| 326 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 327 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 328 | fi | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 312 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 313 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 314 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 315 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 316 | -·name:·Gather·the·package·facts | 337 | -·name:·Gather·the·package·facts |
| 317 | ··package_facts: | 338 | ··package_facts: |
| Offset 358, 38 lines modified | Offset 382, 14 lines modified | ||
| 358 | ··-·NIST-800-53-CM-7(b) | 382 | ··-·NIST-800-53-CM-7(b) |
| 359 | ··-·disable_strategy | 383 | ··-·disable_strategy |
| 360 | ··-·kernel_module_rds_disabled | 384 | ··-·kernel_module_rds_disabled |
| 361 | ··-·low_complexity | 385 | ··-·low_complexity |
| 362 | ··-·low_severity | 386 | ··-·low_severity |
| 363 | ··-·medium_disruption | 387 | ··-·medium_disruption |
| 364 | ··-·reboot_required | 388 | ··-·reboot_required |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 370 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 371 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 372 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 373 | if·LC_ALL=C·grep·-q·-m·1·"^install·rds"·/etc/modprobe.d/rds.conf·;·then | ||
| 374 | » | ||
| 375 | » sed·-i·'s#^install·rds.*#install·rds·/bin/false#g'·/etc/modprobe.d/rds.conf | ||
| 376 | else | ||
| 377 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/rds.conf | ||
| 378 | » echo·"install·rds·/bin/false"·>>·/etc/modprobe.d/rds.conf | ||
| 379 | fi | ||
| 380 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·rds$"·/etc/modprobe.d/rds.conf·;·then | ||
| 381 | » echo·"blacklist·rds"·>>·/etc/modprobe.d/rds.conf | ||
| 382 | fi | ||
| 383 | else | ||
| 384 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 385 | fi | ||
| 386 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 389 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·T\x8TI\x8IP\x8PC\x8C·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 387 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide | 390 | The·Transparent·Inter-Process·Communication·(TIPC)·protocol·is·designed·to·provide |
| 388 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc | 391 | communications·between·nodes·in·a·cluster.·To·configure·the·system·to·prevent·the·tipc |
| 389 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ | 392 | kernel·module·from·being·loaded,·add·the·following·line·to·the·file·/etc/modprobe.d/ |
| 390 | tipc.conf: | 393 | tipc.conf: |
| 391 | install·tipc·/bin/false | 394 | install·tipc·/bin/false |
| 392 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for | 395 | Warning: ·This·configuration·baseline·was·created·to·deploy·the·base·operating·system·for |
| Offset 414, 14 lines modified | Offset 414, 38 lines modified | ||
| 414 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 414 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 415 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 415 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 416 | ···························A.9.1.2 | 416 | ···························A.9.1.2 |
| 417 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 417 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 418 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 418 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 419 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 419 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 420 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 | 420 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000095-GPOS-00049 |
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 426 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 427 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 428 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 429 | if·LC_ALL=C·grep·-q·-m·1·"^install·tipc"·/etc/modprobe.d/tipc.conf·;·then | ||
| 430 | » | ||
| 431 | » sed·-i·'s#^install·tipc.*#install·tipc·/bin/false#g'·/etc/modprobe.d/tipc.conf | ||
| 432 | else | ||
| 433 | » echo·-e·"\n#·Disable·per·security·requirements"·>>·/etc/modprobe.d/tipc.conf | ||
| 434 | » echo·"install·tipc·/bin/false"·>>·/etc/modprobe.d/tipc.conf | ||
| 435 | fi | ||
| 436 | if·!·LC_ALL=C·grep·-q·-m·1·"^blacklist·tipc$"·/etc/modprobe.d/tipc.conf·;·then | ||
| 437 | » echo·"blacklist·tipc"·>>·/etc/modprobe.d/tipc.conf | ||
| 438 | fi | ||
| 439 | else | ||
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 441 | fi | ||
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 426 | -·name:·Gather·the·package·facts | 447 | -·name:·Gather·the·package·facts |
| 427 | ··package_facts: | 448 | ··package_facts: |
| Offset 468, 38 lines modified | Offset 492, 14 lines modified | ||
| 468 | ··-·NIST-800-53-CM-7(b) | 492 | ··-·NIST-800-53-CM-7(b) |
| 469 | ··-·disable_strategy | 493 | ··-·disable_strategy |
| 470 | ··-·kernel_module_tipc_disabled | 494 | ··-·kernel_module_tipc_disabled |
| 471 | ··-·low_complexity | 495 | ··-·low_complexity |
| 472 | ··-·low_severity | 496 | ··-·low_severity |
| 473 | ··-·medium_disruption | 497 | ··-·medium_disruption |
| 474 | ··-·reboot_required | 498 | ··-·reboot_required |
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| Max diff block lines reached; 216575/222854 bytes (97.18%) of diff not shown. | |||
| Offset 16249, 783 lines modified | Offset 16249, 783 lines modified | ||
| 0003f780:·612d·7461·7267·6574·3d22·2369·646d·3531··a-target="#idm51 | 0003f780:·612d·7461·7267·6574·3d22·2369·646d·3531··a-target="#idm51 | ||
| 0003f790:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | 0003f790:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | ||
| 0003f7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003f7a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003f7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003f7b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003f7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003f7c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003f7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003f7d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 0003f7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003f7e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003f7f0:·6174·696f·6e20· | 0003f7f0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003f800:· | 0003f800:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003f810:· | 0003f810:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003f820:·6 | 0003f820:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003f830:·6 | 0003f830:·6522·2069·643d·2269·646d·3531·3932·223e··e"·id="idm5192"> | ||
| 0003f840:·32 | 0003f840:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003f850:· | 0003f850:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003f860:·69 | 0003f860:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003f870:· | 0003f870:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003f880:· | 0003f880:·0a69·6620·6470·6b67·2d71·7565·7279·202d··.if·dpkg-query·- | ||
| 0003f890:· | 0003f890:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | ||
| 0003f8a0:· | 0003f8a0:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | ||
| 0003f8b0:· | 0003f8b0:·5374·6174·7573·7d0a·2720·276c·696e·7578··Status}.'·'linux | ||
| 0003f8c0:· | 0003f8c0:·2d62·6173·6527·2032·2667·743b·2f64·6576··-base'·2>/dev | ||
| 0003f8d0:· | 0003f8d0:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f8e0:· | 0003f8e0:·5e69·6e73·7461·6c6c·6564·2026·616d·703b··^installed·& | ||
| 0003f8f0:· | 0003f8f0:·2661·6d70·3b20·6470·6b67·2d71·7565·7279··&·dpkg-query | ||
| 0003f900:· | 0003f900:·202d·2d73·686f·7720·2d2d·7368·6f77·666f···--show·--showfo | ||
| 0003f910:·7 | 0003f910:·726d·6174·3d27·247b·6462·3a53·7461·7475··rmat='${db:Statu | ||
| 0003f920:· | 0003f920:·732d·5374·6174·7573·7d5c·6e27·2027·7273··s-Status}\n'·'rs | ||
| 0003f930:·7 | 0003f930:·7973·6c6f·6727·2032·2667·743b·2f64·6576··yslog'·2>/dev | ||
| 0003f940:· | 0003f940:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f950:· | 0003f950:·275e·696e·7374·616c·6c65·6427·3b20·7468··'^installed';·th | ||
| 0003f960:· | 0003f960:·656e·0a0a·2320·4c69·7374·206f·6620·6c6f··en..#·List·of·lo | ||
| 0003f970:· | 0003f970:·6720·6669·6c65·2070·6174·6873·2074·6f20··g·file·paths·to· | ||
| 0003f980:·6 | 0003f980:·6265·2069·6e73·7065·6374·6564·2066·6f72··be·inspected·for | ||
| 0003f990:·20 | 0003f990:·2063·6f72·7265·6374·2070·6572·6d69·7373···correct·permiss | ||
| 0003f9a0:· | 0003f9a0:·696f·6e73·0a23·202a·2050·7269·6d61·7269··ions.#·*·Primari | ||
| 0003f9b0:· | 0003f9b0:·6c79·2069·6e73·7065·6374·206c·6f67·2066··ly·inspect·log·f | ||
| 0003f9c0:· | 0003f9c0:·696c·6520·7061·7468·7320·6c69·7374·6564··ile·paths·listed | ||
| 0003f9d0:· | 0003f9d0:·2069·6e20·2f65·7463·2f72·7379·736c·6f67···in·/etc/rsyslog | ||
| 0003f9e0:· | 0003f9e0:·2e63·6f6e·660a·5253·5953·4c4f·475f·4554··.conf.RSYSLOG_ET | ||
| 0003f9f0:·43 | 0003f9f0:·435f·434f·4e46·4947·3d22·2f65·7463·2f72··C_CONFIG="/etc/r | ||
| 0003fa00:· | 0003fa00:·7379·736c·6f67·2e63·6f6e·6622·0a23·202a··syslog.conf".#·* | ||
| 0003fa10:·2 | 0003fa10:·2041·6e64·2061·6c73·6f20·7468·6520·6c6f···And·also·the·lo | ||
| 0003fa20:· | 0003fa20:·6720·6669·6c65·2070·6174·6873·206c·6973··g·file·paths·lis | ||
| 0003fa30:·7 | 0003fa30:·7465·6420·6166·7465·7220·7273·7973·6c6f··ted·after·rsyslo | ||
| 0003fa40:· | 0003fa40:·6727·7320·2449·6e63·6c75·6465·436f·6e66··g's·$IncludeConf | ||
| 0003fa50:·6 | 0003fa50:·6967·2064·6972·6563·7469·7665·0a23·2020··ig·directive.#·· | ||
| 0003fa60:· | 0003fa60:·2028·7374·6f72·6520·7468·6520·7265·7375···(store·the·resu | ||
| 0003fa70:·6 | 0003fa70:·6c74·2069·6e74·6f20·6172·7261·7920·666f··lt·into·array·fo | ||
| 0003fa80:·72 | 0003fa80:·7220·7468·6520·6361·7365·2074·6865·7265··r·the·case·there | ||
| 0003fa90:· | 0003fa90:·2773·2073·6865·6c6c·2067·6c6f·6220·7573··'s·shell·glob·us | ||
| 0003faa0:·6 | 0003faa0:·6564·2061·7320·7661·6c75·6520·6f66·2049··ed·as·value·of·I | ||
| 0003fab0:· | 0003fab0:·6e63·6c75·6465·436f·6e66·6967·290a·7265··ncludeConfig).re | ||
| 0003fac0:· | 0003fac0:·6164·6172·7261·7920·2d74·204f·4c44·5f49··adarray·-t·OLD_I | ||
| 0003fad0:·4 | 0003fad0:·4e43·2026·6c74·3b20·266c·743b·2867·7265··NC·<·<(gre | ||
| 0003fae0:· | 0003fae0:·7020·2d65·2022·5c24·496e·636c·7564·6543··p·-e·"\$IncludeC | ||
| 0003faf0:·6 | 0003faf0:·6f6e·6669·675b·5b3a·7370·6163·653a·5d5d··onfig[[:space:]] | ||
| 0003fb00:· | 0003fb00:·5c2b·5b5e·5b3a·7370·6163·653a·5d3b·5d5c··\+[^[:space:];]\ | ||
| 0003fb10:· | 0003fb10:·2b22·202f·6574·632f·7273·7973·6c6f·672e··+"·/etc/rsyslog. | ||
| 0003fb20:· | 0003fb20:·636f·6e66·207c·2063·7574·202d·6420·2720··conf·|·cut·-d·'· | ||
| 0003fb30:· | 0003fb30:·2720·2d66·2032·290a·7265·6164·6172·7261··'·-f·2).readarra | ||
| 0003fb40:·7 | 0003fb40:·7920·2d74·2052·5359·534c·4f47·5f49·4e43··y·-t·RSYSLOG_INC | ||
| 0003fb50:· | 0003fb50:·4c55·4445·5f43·4f4e·4649·4720·266c·743b··LUDE_CONFIG·< | ||
| 0003fb60:· | 0003fb60:·2026·6c74·3b28·666f·7220·494e·4350·4154···<(for·INCPAT | ||
| 0003fb70:· | 0003fb70:·4820·696e·2022·247b·4f4c·445f·494e·435b··H·in·"${OLD_INC[ | ||
| 0003fb80:· | 0003fb80:·405d·7d22·3b20·646f·2065·7661·6c20·7072··@]}";·do·eval·pr | ||
| 0003fb90:· | 0003fb90:·696e·7466·2027·2573·5c5c·6e27·2022·247b··intf·'%s\\n'·"${ | ||
| 0003fba0:· | 0003fba0:·494e·4350·4154·487d·223b·2064·6f6e·6529··INCPATH}";·done) | ||
| 0003fbb0:·0a | 0003fbb0:·0a72·6561·6461·7272·6179·202d·7420·4e45··.readarray·-t·NE | ||
| 0003fbc0:· | 0003fbc0:·575f·494e·4320·266c·743b·2026·6c74·3b28··W_INC·<·<( | ||
| 0003fbd0:· | 0003fbd0:·7365·6420·2d6e·2027·2f5e·5c73·2a69·6e63··sed·-n·'/^\s*inc | ||
| 0003fbe0:· | 0003fbe0:·6c75·6465·282f·2c2f·292f·4970·2720·2f65··lude(/,/)/Ip'·/e | ||
| 0003fbf0:· | 0003fbf0:·7463·2f72·7379·736c·6f67·2e63·6f6e·6620··tc/rsyslog.conf· | ||
| 0003fc00:· | 0003fc00:·7c20·7365·6420·2d6e·2027·7340·2e2a·6669··|·sed·-n·'s@.*fi | ||
| 0003fc10:· | 0003fc10:·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f·5b3a··le\s*=\s*"\([/[: | ||
| 0003fc20:· | 0003fc20:·616c·6e75·6d3a·5d5b·3a70·756e·6374·3a5d··alnum:][:punct:] | ||
| 0003fc30:· | 0003fc30:·5d2a·5c29·222e·2a40·5c31·4049·7027·290a··]*\)".*@\1@Ip'). | ||
| 0003fc40:· | 0003fc40:·7265·6164·6172·7261·7920·2d74·2052·5359··readarray·-t·RSY | ||
| 0003fc50:· | 0003fc50:·534c·4f47·5f49·4e43·4c55·4445·2026·6c74··SLOG_INCLUDE·< | ||
| 0003fc60:· | 0003fc60:·3b20·266c·743b·2866·6f72·2049·4e43·5041··;·<(for·INCPA | ||
| 0003fc70:· | 0003fc70:·5448·2069·6e20·2224·7b4e·4557·5f49·4e43··TH·in·"${NEW_INC | ||
| 0003fc80:· | 0003fc80:·5b40·5d7d·223b·2064·6f20·6576·616c·2070··[@]}";·do·eval·p | ||
| 0003fc90:· | 0003fc90:·7269·6e74·6620·2725·735c·5c6e·2720·2224··rintf·'%s\\n'·"$ | ||
| 0003fca0:· | 0003fca0:·7b49·4e43·5041·5448·7d22·3b20·646f·6e65··{INCPATH}";·done | ||
| 0003fcb0:· | 0003fcb0:·290a·0a23·2044·6563·6c61·7265·2061·6e20··)..#·Declare·an· | ||
| 0003fcc0:· | 0003fcc0:·6172·7261·7920·746f·2068·6f6c·6420·7468··array·to·hold·th | ||
| 0003fcd0:·20 | 0003fcd0:·6520·6669·6e61·6c20·6c69·7374·206f·6620··e·final·list·of· | ||
| 0003fce0:· | 0003fce0:·6469·6666·6572·656e·7420·6c6f·6720·6669··different·log·fi | ||
| 0003fcf0:·6 | 0003fcf0:·6c65·2070·6174·6873·0a64·6563·6c61·7265··le·paths.declare | ||
| 0003fd00:· | 0003fd00:·202d·6120·4c4f·475f·4649·4c45·5f50·4154···-a·LOG_FILE_PAT | ||
| 0003fd10:· | 0003fd10:·4853·0a0a·2320·4172·7261·7920·746f·2068··HS..#·Array·to·h | ||
| 0003fd20:·6 | 0003fd20:·6f6c·6420·616c·6c20·7273·7973·6c6f·6720··old·all·rsyslog· | ||
| 0003fd30:· | 0003fd30:·636f·6e66·6967·2065·6e74·7269·6573·0a52··config·entries.R | ||
| 0003fd40:· | 0003fd40:·5359·534c·4f47·5f43·4f4e·4649·4753·3d28··SYSLOG_CONFIGS=( | ||
| 0003fd50:·2 | 0003fd50:·290a·5253·5953·4c4f·475f·434f·4e46·4947··).RSYSLOG_CONFIG | ||
| 0003fd60:· | 0003fd60:·533d·2822·247b·5253·5953·4c4f·475f·4554··S=("${RSYSLOG_ET | ||
| 0003fd70:· | 0003fd70:·435f·434f·4e46·4947·7d22·2022·247b·5253··C_CONFIG}"·"${RS | ||
| 0003fd80:· | 0003fd80:·5953·4c4f·475f·494e·434c·5544·455f·434f··YSLOG_INCLUDE_CO | ||
| 0003fd90:· | 0003fd90:·4e46·4947·5b40·5d7d·2220·2224·7b52·5359··NFIG[@]}"·"${RSY | ||
| 0003fda0:· | 0003fda0:·534c·4f47·5f49·4e43·4c55·4445·5b40·5d7d··SLOG_INCLUDE[@]} | ||
| 0003fdb0:· | 0003fdb0:·2229·0a0a·2320·4765·7420·6675·6c6c·206c··")..#·Get·full·l | ||
| 0003fdc0:·6 | 0003fdc0:·6973·7420·6f66·2066·696c·6573·2074·6f20··ist·of·files·to· | ||
| 0003fdd0:· | 0003fdd0:·6265·2063·6865·636b·6564·0a23·2052·5359··be·checked.#·RSY | ||
| 0003fde0:· | 0003fde0:·534c·4f47·5f43·4f4e·4649·4753·206d·6179··SLOG_CONFIGS·may | ||
| 0003fdf0:· | 0003fdf0:·2063·6f6e·7461·696e·2067·6c6f·6273·2073···contain·globs·s | ||
| 0003fe00:· | 0003fe00:·7563·6820·6173·0a23·202f·6574·632f·7273··uch·as.#·/etc/rs | ||
| 0003fe10:· | 0003fe10:·7973·6c6f·672e·642f·2a2e·636f·6e66·202f··yslog.d/*.conf·/ | ||
| 0003fe20:·6 | 0003fe20:·6574·632f·7273·7973·6c6f·672e·642f·2a2e··etc/rsyslog.d/*. | ||
| 0003fe30:· | 0003fe30:·6672·756c·650a·2320·536f·2c20·6c6f·6f70··frule.#·So,·loop | ||
| 0003fe40:· | 0003fe40:·206f·7665·7220·7468·6520·656e·7472·6965···over·the·entrie | ||
| 0003fe50:· | 0003fe50:·7320·696e·2052·5359·534c·4f47·5f43·4f4e··s·in·RSYSLOG_CON | ||
| 0003fe60:· | 0003fe60:·4649·4753·2061·6e64·2075·7365·2066·696e··FIGS·and·use·fin | ||
| 0003fe70:· | 0003fe70:·6420·746f·2067·6574·2074·6865·206c·6973··d·to·get·the·lis | ||
| 0003fe80:· | 0003fe80:·7420·6f66·2069·6e63·6c75·6465·6420·6669··t·of·included·fi | ||
| 0003fe90:· | 0003fe90:·6c65·732e·0a52·5359·534c·4f47·5f43·4f4e··les..RSYSLOG_CON | ||
| 0003fea0:· | 0003fea0:·4649·475f·4649·4c45·533d·2829·0a66·6f72··FIG_FILES=().for | ||
| 0003feb0:· | 0003feb0:·2045·4e54·5259·2069·6e20·2224·7b52·5359···ENTRY·in·"${RSY | ||
| 0003fec0:· | 0003fec0:·534c·4f47·5f43·4f4e·4649·4753·5b40·5d7d··SLOG_CONFIGS[@]} | ||
| 0003fed0:·2 | 0003fed0:·220a·646f·0a09·2320·4966·2064·6972·6563··".do..#·If·direc | ||
| 0003fee0:· | 0003fee0:·746f·7279·2c20·7273·7973·6c6f·6720·7769··tory,·rsyslog·wi | ||
| 0003fef0:· | 0003fef0:·6c6c·2073·6561·7263·6820·666f·7220·636f··ll·search·for·co | ||
| 0003ff00:· | 0003ff00:·6e66·6967·2066·696c·6573·2069·6e20·7265··nfig·files·in·re | ||
| 0003ff10:·5 | 0003ff10:·6375·7273·6976·656c·792e·0a09·2320·486f··cursively...#·Ho | ||
| 0003ff20:· | 0003ff20:·7765·7665·722c·2066·696c·6573·2069·6e20··wever,·files·in· | ||
| 0003ff30:· | 0003ff30:·6869·6464·656e·2073·7562·2d64·6972·6563··hidden·sub-direc | ||
| 0003ff40:· | 0003ff40:·746f·7269·6573·206f·7220·6869·6464·656e··tories·or·hidden | ||
| 0003ff50:· | 0003ff50:·2066·696c·6573·2077·696c·6c20·6265·2069···files·will·be·i | ||
| Max diff block lines reached; 1119789/1226491 bytes (91.30%) of diff not shown. | |||
| Offset 264, 14 lines modified | Offset 264, 142 lines modified | ||
| 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 264 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 265 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 266 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 267 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 268 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 269 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 272 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 273 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 274 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 275 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 276 | q·'^installed';·then | ||
| 277 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 278 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 279 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 280 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 281 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 282 | of·IncludeConfig) | ||
| 283 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 284 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 285 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 286 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 287 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 288 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 289 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 290 | '%s\\n'·"${INCPATH}";·done) | ||
| 291 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 292 | declare·-a·LOG_FILE_PATHS | ||
| 293 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 294 | RSYSLOG_CONFIGS=() | ||
| 295 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 296 | {RSYSLOG_INCLUDE[@]}") | ||
| 297 | #·Get·full·list·of·files·to·be·checked | ||
| 298 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 299 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 300 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 301 | included·files. | ||
| 302 | RSYSLOG_CONFIG_FILES=() | ||
| 303 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 304 | do | ||
| 305 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 306 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 307 | » if·[·-d·"${ENTRY}"·] | ||
| 308 | » then | ||
| 309 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 310 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 311 | » elif·[·-f·"${ENTRY}"·] | ||
| 312 | » then | ||
| 313 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 314 | » else | ||
| 315 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 316 | » fi | ||
| 317 | done | ||
| 318 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 319 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 320 | configuration) | ||
| 321 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 322 | do | ||
| 323 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 324 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 325 | ('$')·characters, | ||
| 326 | » #·*·Ignore·empty·lines, | ||
| 327 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 328 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 329 | not·log·files | ||
| 330 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 331 | path | ||
| 332 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 333 | all·of·the | ||
| 334 | » #·following·are·met: | ||
| 335 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 336 | » #·*·it·is·preceded·by·space | ||
| 337 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 338 | characters | ||
| 339 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 340 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 341 | » then | ||
| 342 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 343 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 344 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 345 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 346 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 347 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 348 | {FILTERED_PATHS}") | ||
| 349 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 350 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 351 | newline),·split | ||
| 352 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 353 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 354 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 355 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 356 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 357 | » » #·Delete·the·temporary·array | ||
| 358 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 359 | » fi | ||
| 360 | done | ||
| 361 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 362 | grep·regex·is·a·bit | ||
| 363 | #·curly: | ||
| 364 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 365 | #·extract·File="logfile"·expression | ||
| 366 | #·match·only·"logfile"·expression | ||
| 367 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 368 | do | ||
| 369 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 370 | "${LOG_FILE}") | ||
| 371 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 372 | alnum:][:punct:]]*)\"\s*\)") | ||
| 373 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 374 | ]]*)\""|tr·-d·"\"")") | ||
| 375 | done | ||
| 376 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 377 | FILE_CMD="chgrp" | ||
| 378 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 379 | do | ||
| 380 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 381 | further·processing | ||
| 382 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 383 | » then | ||
| Max diff block lines reached; 144451/150102 bytes (96.24%) of diff not shown. | |||
| Offset 15095, 188 lines modified | Offset 15095, 188 lines modified | ||
| 0003af60:·6765·743d·2223·6964·6d32·3736·3322·2074··get="#idm2763"·t | 0003af60:·6765·743d·2223·6964·6d32·3736·3322·2074··get="#idm2763"·t | ||
| 0003af70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003afa0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003afa0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003afb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003afb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afd0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afe0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aff0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b000:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003 | 0003afd0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003afe0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003aff0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b000:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b010:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b020:·646d·3237·3633·223e·3c70·7265·3e3c·636f··dm2763"><pre><co | |||
| 0003b030:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b040:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b050:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b060:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b0 | 0003b070:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b030:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b040:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b050:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b060:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b070:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b080:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0 | 0003b080:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b090:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b0a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b0b0:·6964·6d32·3736·3422·2074·6162·696e·6465··idm2764"·tabinde | |||
| 0003b0c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b0d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b0e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b0f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b100:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b110:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b120:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b130:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b140:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b150:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b160:·6d32·3736·3422·3e3c·7461·626c·6520·636c··m2764"><table·cl | |||
| 0003b170:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b180:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b190:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b1a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b1b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b1c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b0b0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b1d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b1e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003b1f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b200:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b210:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b220:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b230:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b240:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b250:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b260:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b270:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b280:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b290:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b2a0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b2b0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b0e0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b0f0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b100:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b110:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b120:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b130:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b140:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b150:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b160:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b170:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b180:·472d·5542·5455·2d32·302d·3031·3034·3530··G-UBTU-20-010450 | |||
| 0003b190:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b1a0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b1b0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b1c0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b1d0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b1e0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b1f0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b200:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b210:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b220:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b230:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b240:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b250:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b260:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b270:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b280:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b290:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b2a0:·2020·7768·656e·3a20·2722·6c69·6e75·782d····when:·'"linux- | |||
| 0003b2b0:·6261·7365·2220·696e·2061·6e73·6962·6c65··base"·in·ansible | |||
| 0003b2c0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b2d0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b2e0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b2f0:·4953·412d·5354·4947·2d55·4254·552d·3230··ISA-STIG-UBTU-20 | |||
| 0003b300:·2d30·3130·3435·300a·2020·2d20·4e49·5354··-010450.··-·NIST | |||
| 0003b310:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b320:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b330:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b340:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b350:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b360:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b370:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b380:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b390:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b3a0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b3b0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b3c0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b3d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b3e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b3f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b400:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b410:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | |||
| 0003b420:·3634·2220·7461·6269·6e64·6578·3d22·3022··64"·tabindex="0" | |||
| 0003b430:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b440:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b450:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b460:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b470:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b480:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b490:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 6645609/6670201 bytes (99.63%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 45 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 150 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 151 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 161 | ··package_facts: |
| Offset 159, 45 lines modified | Offset 190, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 190 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 191 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 192 | ··-·low_complexity |
| 162 | ··-·low_disruption | 193 | ··-·low_disruption |
| 163 | ··-·medium_severity | 194 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 195 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 196 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 176 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 177 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 178 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | include·install_aide | ||
| 188 | class·install_aide·{ | ||
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·aideinit | 199 | $·sudo·aideinit |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 198 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 202 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 199 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 224, 14 lines modified | Offset 224, 41 lines modified | ||
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 226 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 227 | ············_\x8c_\x8i_\x8s············1.4.1 | 227 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 232 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 233 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 234 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 235 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 236 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 237 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 238 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 241 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 242 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 243 | fi | ||
| 244 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 245 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 246 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 247 | fi | ||
| 248 | /usr/sbin/aideinit·-y·-f | ||
| 249 | else | ||
| 250 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 251 | fi | ||
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 896600/901665 bytes (99.44%) of diff not shown. | |||
| Offset 15090, 189 lines modified | Offset 15090, 189 lines modified | ||
| 0003af10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003af10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003af20:·3d22·2369·646d·3237·3633·2220·7461·6269··="#idm2763"·tabi | 0003af20:·3d22·2369·646d·3237·3633·2220·7461·6269··="#idm2763"·tabi | ||
| 0003af30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003af30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003af40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003af40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003af50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003af50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003af60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003af60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003af70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003af70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003af80:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003af80:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003af90:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003afa0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003afb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003afc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003afd0:·3d22·6964·6d32·3736·3322·3e3c·7461·626c··="idm2763"><tabl | |||
| 0003afe0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aff0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b000:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b010:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b020:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b030:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b040:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003 | 0003af90:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003afa0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003afb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003afc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003afd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003afe0:·3736·3322·3e3c·7072·653e·3c63·6f64·653e··763"><pre><code> | |||
| 0003aff0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b000:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b010:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b020:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b030:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b040:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b050:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b060:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b070:·3237·3634·2220·7461·6269·6e64·6578·3d22··2764"·tabindex=" | |||
| 0003b080:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b090:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b0a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b0b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b0c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b0d0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b0e0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b100:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b110:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b120:·3634·223e·3c74·6162·6c65·2063·6c61·7373··64"><table·class | |||
| 0003b130:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b140:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b150:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b160:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b170:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b180:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b070:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003b190:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b1a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b1b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b1c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b1d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b1f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b200:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b210:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b220:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003b230:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003b240:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003b250:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003b260:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003b270:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003b0b0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b0c0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b0d0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b0e0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b0f0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b100:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b110:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b120:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b130:·0a20·202d·2044·4953·412d·5354·4947·2d55··.··-·DISA-STIG-U | |||
| 0003b140:·4254·552d·3230·2d30·3130·3435·300a·2020··BTU-20-010450.·· | |||
| 0003b150:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b160:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b170:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b180:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b190:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b1a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b1b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b1c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b1d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b1e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b1f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b200:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b210:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b220:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b230:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b240:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b250:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b260:·6865·6e3a·2027·226c·696e·7578·2d62·6173··hen:·'"linux-bas | |||
| 0003b270:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003b280:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b290:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b2a0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b2b0:·2d53·5449·472d·5542·5455·2d32·302d·3031··-STIG-UBTU-20-01 | |||
| 0003b2c0:·3034·3530·0a20·202d·204e·4953·542d·3830··0450.··-·NIST-80 | |||
| 0003b2d0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b2e0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b2f0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b300:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b310:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b320:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b330:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b340:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b350:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b360:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b370:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b380:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b390:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b3c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b3d0:·6172·6765·743d·2223·6964·6d32·3736·3422··arget="#idm2764" | |||
| 0003b3e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b3f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b400:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b410:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b420:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b430:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b440:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b450:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| Max diff block lines reached; 6480693/6505423 bytes (99.62%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 45 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 149 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 150 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Gather·the·package·facts | 159 | -·name:·Gather·the·package·facts |
| 133 | ··package_facts: | 160 | ··package_facts: |
| Offset 158, 45 lines modified | Offset 189, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 189 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 190 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 191 | ··-·low_complexity |
| 161 | ··-·low_disruption | 192 | ··-·low_disruption |
| 162 | ··-·medium_severity | 193 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 194 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 195 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 176 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 177 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 178 | else | ||
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 180 | fi | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | include·install_aide | ||
| 187 | class·install_aide·{ | ||
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·aideinit | 198 | $·sudo·aideinit |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 200 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 197 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 201 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 198 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 223, 14 lines modified | Offset 223, 41 lines modified | ||
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 226 | ············_\x8c_\x8i_\x8s············1.4.1 | 226 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 227 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 227 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 232 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 233 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 234 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 235 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 236 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 237 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 238 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 239 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 240 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 241 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 242 | fi | ||
| 243 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 244 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 245 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 246 | fi | ||
| 247 | /usr/sbin/aideinit·-y·-f | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 878390/883455 bytes (99.43%) of diff not shown. | |||
| Offset 15117, 188 lines modified | Offset 15117, 188 lines modified | ||
| 0003b0c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b0c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b0d0:·646d·3237·3633·2220·7461·6269·6e64·6578··dm2763"·tabindex | 0003b0d0:·646d·3237·3633·2220·7461·6269·6e64·6578··dm2763"·tabindex | ||
| 0003b0e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b0e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b0f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b0f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b100:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b100:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b110:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b110:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b120:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b120:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b130:·6d65·6469·6174·696f·6e20·4 | 0003b130:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b140:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b150:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b160:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b170:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b180:·6d32·3736·3322·3e3c·7461·626c·6520·636c··m2763"><table·cl | |||
| 0003b190:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b1a0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1b0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b1c0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b1d0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b1e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b1 | 0003b140:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b150:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b160:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b170:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b180:·7365·2220·6964·3d22·6964·6d32·3736·3322··se"·id="idm2763" | |||
| 0003b190:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b1a0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b1b0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b1c0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b1d0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1e0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1f0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b200:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b210:·7461·7267·6574·3d22·2369·646d·3237·3634··target="#idm2764 | |||
| 0003b220:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b230:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b240:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b250:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b260:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b270:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b280:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b290:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b2a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b2c0:·6522·2069·643d·2269·646d·3237·3634·223e··e"·id="idm2764"> | |||
| 0003b2d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b2e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b300:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b310:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b320:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b330:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b220:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b230:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b340:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b350:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b360:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003b370:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b380:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b390:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b3a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b3b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b3c0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b3d0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b3e0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b3f0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b400:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b410:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b420:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b260:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b270:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b280:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b290:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b2a0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b2b0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b2c0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b2d0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b2e0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b2f0:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b300:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b310:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b320:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b330:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b340:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b350:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b360:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b370:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b380:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b390:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b3a0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b3b0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b3c0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b3d0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b3e0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b3f0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b400:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b410:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | |||
| 0003b420:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b430:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b440:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b450:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b460:·472d·5542·5455·2d32·302d·3031·3034·3530··G-UBTU-20-010450 | |||
| 0003b470:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b480:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b490:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b4a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b4b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b4c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b4d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b4e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b500:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b510:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b520:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b530:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b540:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b550:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b560:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b570:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b580:·743d·2223·6964·6d32·3736·3422·2074·6162··t="#idm2764"·tab | |||
| 0003b590:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b5a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b5b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b5c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b5d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b5e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b5f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| Max diff block lines reached; 19757559/19782151 bytes (99.88%) of diff not shown. | |||
| Offset 15113, 188 lines modified | Offset 15113, 188 lines modified | ||
| 0003b080:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b080:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b090:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | 0003b090:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | ||
| 0003b0a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b0b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b0b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b0c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b0c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b0d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b0d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b0e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b0e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b0f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b100:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b110:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b120:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b130:·6170·7365·2220·6964·3d22·6964·6d32·3736··apse"·id="idm276 | |||
| 0003b140:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b150:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b160:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b170:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b180:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b190:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b1a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b | 0003b0f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b100:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b110:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b120:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b130:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b140:·6964·3d22·6964·6d32·3736·3322·3e3c·7072··id="idm2763"><pr | |||
| 0003b150:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b160:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b170:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b180:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b190:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1d0:·6574·3d22·2369·646d·3237·3634·2220·7461··et="#idm2764"·ta | |||
| 0003b1e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b1f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b200:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b210:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b220:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b230:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b240:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b250:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b260:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b270:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b280:·643d·2269·646d·3237·3634·223e·3c74·6162··d="idm2764"><tab | |||
| 0003b290:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b2e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b2f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b300:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b310:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b320:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b330:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b340:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b350:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b360:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b370:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b380:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b390:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b3a0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b3b0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b3c0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b3d0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b1e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b1f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b200:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b210:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b220:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b230:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b240:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b250:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b260:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b270:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b280:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b290:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b2a0:·412d·5354·4947·2d55·4254·552d·3230·2d30··A-STIG-UBTU-20-0 | |||
| 0003b2b0:·3130·3435·300a·2020·2d20·4e49·5354·2d38··10450.··-·NIST-8 | |||
| 0003b2c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b2d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b2e0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b2f0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b300:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b310:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b320:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b330:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b340:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b350:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b360:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b370:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b380:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b390:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b3a0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b3b0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b3c0:·7365·6e74·0a20·2077·6865·6e3a·2027·226c··sent.··when:·'"l | |||
| 0003b3d0:·696e·7578·2d62·6173·6522·2069·6e20·616e··inux-base"·in·an | |||
| 0003b3e0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b3f0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b400:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b410:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b420:·5455·2d32·302d·3031·3034·3530·0a20·202d··TU-20-010450.··- | |||
| 0003b430:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b440:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b450:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b460:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b470:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b480:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b490:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b4a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b4b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b4c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b4d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4e0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b500:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b510:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b520:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b540:·6964·6d32·3736·3422·2074·6162·696e·6465··idm2764"·tabinde | |||
| 0003b550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b5a0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| Max diff block lines reached; 19714175/19738767 bytes (99.88%) of diff not shown. | |||
| Offset 16554, 783 lines modified | Offset 16554, 783 lines modified | ||
| 00040a90:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00040a90:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00040aa0:·3130·3237·2220·7461·6269·6e64·6578·3d22··1027"·tabindex=" | 00040aa0:·3130·3237·2220·7461·6269·6e64·6578·3d22··1027"·tabindex=" | ||
| 00040ab0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00040ab0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00040ac0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00040ac0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00040ad0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00040ad0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00040ae0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00040ae0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 00040af0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00040af0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00040b00:·6469·6174·696f·6e20· | 00040b00:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 00040b10:·7 | 00040b10:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 00040b20:· | 00040b20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 00040b30:·6 | 00040b30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 00040b40:· | 00040b40:·7073·6522·2069·643d·2269·646d·3131·3032··pse"·id="idm1102 | ||
| 00040b50:·3 | 00040b50:·3722·3e3c·7072·653e·3c63·6f64·653e·2320··7"><pre><code>#· | ||
| 00040b60:· | 00040b60:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 00040b70:·7 | 00040b70:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 00040b80:· | 00040b80:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 00040b90:· | 00040b90:·726d·730a·6966·2064·706b·672d·7175·6572··rms.if·dpkg-quer | ||
| 00040ba0:· | 00040ba0:·7920·2d2d·7368·6f77·202d·2d73·686f·7766··y·--show·--showf | ||
| 00040bb0:· | 00040bb0:·6f72·6d61·743d·2724·7b64·623a·5374·6174··ormat='${db:Stat | ||
| 00040bc0:· | 00040bc0:·7573·2d53·7461·7475·737d·0a27·2027·6c69··us-Status}.'·'li | ||
| 00040bd0:·6 | 00040bd0:·6e75·782d·6261·7365·2720·3226·6774·3b2f··nux-base'·2>/ | ||
| 00040be0:·6 | 00040be0:·6465·762f·6e75·6c6c·207c·2067·7265·7020··dev/null·|·grep· | ||
| 00040bf0:· | 00040bf0:·2d71·205e·696e·7374·616c·6c65·6420·2661··-q·^installed·&a | ||
| 00040c00:· | 00040c00:·6d70·3b26·616d·703b·2064·706b·672d·7175··mp;&·dpkg-qu | ||
| 00040c10:· | 00040c10:·6572·7920·2d2d·7368·6f77·202d·2d73·686f··ery·--show·--sho | ||
| 00040c20:·7 | 00040c20:·7766·6f72·6d61·743d·2724·7b64·623a·5374··wformat='${db:St | ||
| 00040c30:·6 | 00040c30:·6174·7573·2d53·7461·7475·737d·5c6e·2720··atus-Status}\n'· | ||
| 00040c40:· | 00040c40:·2772·7379·736c·6f67·2720·3226·6774·3b2f··'rsyslog'·2>/ | ||
| 00040c50:·6 | 00040c50:·6465·762f·6e75·6c6c·207c·2067·7265·7020··dev/null·|·grep· | ||
| 00040c60:· | 00040c60:·2d71·2027·5e69·6e73·7461·6c6c·6564·273b··-q·'^installed'; | ||
| 00040c70:·6 | 00040c70:·2074·6865·6e0a·0a23·204c·6973·7420·6f66···then..#·List·of | ||
| 00040c80:· | 00040c80:·206c·6f67·2066·696c·6520·7061·7468·7320···log·file·paths· | ||
| 00040c90:·7 | 00040c90:·746f·2062·6520·696e·7370·6563·7465·6420··to·be·inspected· | ||
| 00040ca0:· | 00040ca0:·666f·7220·636f·7272·6563·7420·7065·726d··for·correct·perm | ||
| 00040cb0:· | 00040cb0:·6973·7369·6f6e·730a·2320·2a20·5072·696d··issions.#·*·Prim | ||
| 00040cc0:· | 00040cc0:·6172·696c·7920·696e·7370·6563·7420·6c6f··arily·inspect·lo | ||
| 00040cd0:· | 00040cd0:·6720·6669·6c65·2070·6174·6873·206c·6973··g·file·paths·lis | ||
| 00040ce0:· | 00040ce0:·7465·6420·696e·202f·6574·632f·7273·7973··ted·in·/etc/rsys | ||
| 00040cf0:· | 00040cf0:·6c6f·672e·636f·6e66·0a52·5359·534c·4f47··log.conf.RSYSLOG | ||
| 00040d00:· | 00040d00:·5f45·5443·5f43·4f4e·4649·473d·222f·6574··_ETC_CONFIG="/et | ||
| 00040d10:· | 00040d10:·632f·7273·7973·6c6f·672e·636f·6e66·220a··c/rsyslog.conf". | ||
| 00040d20:· | 00040d20:·2320·2a20·416e·6420·616c·736f·2074·6865··#·*·And·also·the | ||
| 00040d30:· | 00040d30:·206c·6f67·2066·696c·6520·7061·7468·7320···log·file·paths· | ||
| 00040d40:· | 00040d40:·6c69·7374·6564·2061·6674·6572·2072·7379··listed·after·rsy | ||
| 00040d50:· | 00040d50:·736c·6f67·2773·2024·496e·636c·7564·6543··slog's·$IncludeC | ||
| 00040d60:· | 00040d60:·6f6e·6669·6720·6469·7265·6374·6976·650a··onfig·directive. | ||
| 00040d70:· | 00040d70:·2320·2020·2873·746f·7265·2074·6865·2072··#···(store·the·r | ||
| 00040d80:· | 00040d80:·6573·756c·7420·696e·746f·2061·7272·6179··esult·into·array | ||
| 00040d90:·20 | 00040d90:·2066·6f72·2074·6865·2063·6173·6520·7468···for·the·case·th | ||
| 00040da0:· | 00040da0:·6572·6527·7320·7368·656c·6c20·676c·6f62··ere's·shell·glob | ||
| 00040db0:· | 00040db0:·2075·7365·6420·6173·2076·616c·7565·206f···used·as·value·o | ||
| 00040dc0:· | 00040dc0:·6620·496e·636c·7564·6543·6f6e·6669·6729··f·IncludeConfig) | ||
| 00040dd0:· | 00040dd0:·0a72·6561·6461·7272·6179·202d·7420·4f4c··.readarray·-t·OL | ||
| 00040de0:· | 00040de0:·445f·494e·4320·266c·743b·2026·6c74·3b28··D_INC·<·<( | ||
| 00040df0:·7 | 00040df0:·6772·6570·202d·6520·225c·2449·6e63·6c75··grep·-e·"\$Inclu | ||
| 00040e00:·6 | 00040e00:·6465·436f·6e66·6967·5b5b·3a73·7061·6365··deConfig[[:space | ||
| 00040e10:· | 00040e10:·3a5d·5d5c·2b5b·5e5b·3a73·7061·6365·3a5d··:]]\+[^[:space:] | ||
| 00040e20:· | 00040e20:·3b5d·5c2b·2220·2f65·7463·2f72·7379·736c··;]\+"·/etc/rsysl | ||
| 00040e30:· | 00040e30:·6f67·2e63·6f6e·6620·7c20·6375·7420·2d64··og.conf·|·cut·-d | ||
| 00040e40:· | 00040e40:·2027·2027·202d·6620·3229·0a72·6561·6461···'·'·-f·2).reada | ||
| 00040e50:·727 | 00040e50:·7272·6179·202d·7420·5253·5953·4c4f·475f··rray·-t·RSYSLOG_ | ||
| 00040e60:· | 00040e60:·494e·434c·5544·455f·434f·4e46·4947·2026··INCLUDE_CONFIG·& | ||
| 00040e70:· | 00040e70:·6c74·3b20·266c·743b·2866·6f72·2049·4e43··lt;·<(for·INC | ||
| 00040e80:· | 00040e80:·5041·5448·2069·6e20·2224·7b4f·4c44·5f49··PATH·in·"${OLD_I | ||
| 00040e90:· | 00040e90:·4e43·5b40·5d7d·223b·2064·6f20·6576·616c··NC[@]}";·do·eval | ||
| 00040ea0:·20 | 00040ea0:·2070·7269·6e74·6620·2725·735c·5c6e·2720···printf·'%s\\n'· | ||
| 00040eb0:· | 00040eb0:·2224·7b49·4e43·5041·5448·7d22·3b20·646f··"${INCPATH}";·do | ||
| 00040ec0:·6 | 00040ec0:·6e65·290a·7265·6164·6172·7261·7920·2d74··ne).readarray·-t | ||
| 00040ed0:·2 | 00040ed0:·204e·4557·5f49·4e43·2026·6c74·3b20·266c···NEW_INC·<·&l | ||
| 00040ee0:· | 00040ee0:·743b·2873·6564·202d·6e20·272f·5e5c·732a··t;(sed·-n·'/^\s* | ||
| 00040ef0:· | 00040ef0:·696e·636c·7564·6528·2f2c·2f29·2f49·7027··include(/,/)/Ip' | ||
| 00040f00:· | 00040f00:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 00040f10:· | 00040f10:·6e66·207c·2073·6564·202d·6e20·2773·402e··nf·|·sed·-n·'s@. | ||
| 00040f20:· | 00040f20:·2a66·696c·655c·732a·3d5c·732a·225c·285b··*file\s*=\s*"\([ | ||
| 00040f30:· | 00040f30:·2f5b·3a61·6c6e·756d·3a5d·5b3a·7075·6e63··/[:alnum:][:punc | ||
| 00040f40:·7 | 00040f40:·743a·5d5d·2a5c·2922·2e2a·405c·3140·4970··t:]]*\)".*@\1@Ip | ||
| 00040f50:· | 00040f50:·2729·0a72·6561·6461·7272·6179·202d·7420··').readarray·-t· | ||
| 00040f60:· | 00040f60:·5253·5953·4c4f·475f·494e·434c·5544·4520··RSYSLOG_INCLUDE· | ||
| 00040f70:· | 00040f70:·266c·743b·2026·6c74·3b28·666f·7220·494e··<·<(for·IN | ||
| 00040f80:· | 00040f80:·4350·4154·4820·696e·2022·247b·4e45·575f··CPATH·in·"${NEW_ | ||
| 00040f90:· | 00040f90:·494e·435b·405d·7d22·3b20·646f·2065·7661··INC[@]}";·do·eva | ||
| 00040fa0:· | 00040fa0:·6c20·7072·696e·7466·2027·2573·5c5c·6e27··l·printf·'%s\\n' | ||
| 00040fb0:· | 00040fb0:·2022·247b·494e·4350·4154·487d·223b·2064···"${INCPATH}";·d | ||
| 00040fc0:·6 | 00040fc0:·6f6e·6529·0a0a·2320·4465·636c·6172·6520··one)..#·Declare· | ||
| 00040fd0:·6 | 00040fd0:·616e·2061·7272·6179·2074·6f20·686f·6c64··an·array·to·hold | ||
| 00040fe0:· | 00040fe0:·2074·6865·2066·696e·616c·206c·6973·7420···the·final·list· | ||
| 00040ff0:·6 | 00040ff0:·6f66·2064·6966·6665·7265·6e74·206c·6f67··of·different·log | ||
| 00041000:· | 00041000:·2066·696c·6520·7061·7468·730a·6465·636c···file·paths.decl | ||
| 00041010:·6 | 00041010:·6172·6520·2d61·204c·4f47·5f46·494c·455f··are·-a·LOG_FILE_ | ||
| 00041020:· | 00041020:·5041·5448·530a·0a23·2041·7272·6179·2074··PATHS..#·Array·t | ||
| 00041030:·6 | 00041030:·6f20·686f·6c64·2061·6c6c·2072·7379·736c··o·hold·all·rsysl | ||
| 00041040:·6 | 00041040:·6f67·2063·6f6e·6669·6720·656e·7472·6965··og·config·entrie | ||
| 00041050:· | 00041050:·730a·5253·5953·4c4f·475f·434f·4e46·4947··s.RSYSLOG_CONFIG | ||
| 00041060:· | 00041060:·533d·2829·0a52·5359·534c·4f47·5f43·4f4e··S=().RSYSLOG_CON | ||
| 00041070:· | 00041070:·4649·4753·3d28·2224·7b52·5359·534c·4f47··FIGS=("${RSYSLOG | ||
| 00041080:· | 00041080:·5f45·5443·5f43·4f4e·4649·477d·2220·2224··_ETC_CONFIG}"·"$ | ||
| 00041090:·7 | 00041090:·7b52·5359·534c·4f47·5f49·4e43·4c55·4445··{RSYSLOG_INCLUDE | ||
| 000410a0:· | 000410a0:·5f43·4f4e·4649·475b·405d·7d22·2022·247b··_CONFIG[@]}"·"${ | ||
| 000410b0:· | 000410b0:·5253·5953·4c4f·475f·494e·434c·5544·455b··RSYSLOG_INCLUDE[ | ||
| 000410c0:· | 000410c0:·405d·7d22·290a·0a23·2047·6574·2066·756c··@]}")..#·Get·ful | ||
| 000410d0:· | 000410d0:·6c20·6c69·7374·206f·6620·6669·6c65·7320··l·list·of·files· | ||
| 000410e0:· | 000410e0:·746f·2062·6520·6368·6563·6b65·640a·2320··to·be·checked.#· | ||
| 000410f0:· | 000410f0:·5253·5953·4c4f·475f·434f·4e46·4947·5320··RSYSLOG_CONFIGS· | ||
| 00041100:· | 00041100:·6d61·7920·636f·6e74·6169·6e20·676c·6f62··may·contain·glob | ||
| 00041110:· | 00041110:·7320·7375·6368·2061·730a·2320·2f65·7463··s·such·as.#·/etc | ||
| 00041120:· | 00041120:·2f72·7379·736c·6f67·2e64·2f2a·2e63·6f6e··/rsyslog.d/*.con | ||
| 00041130:· | 00041130:·6620·2f65·7463·2f72·7379·736c·6f67·2e64··f·/etc/rsyslog.d | ||
| 00041140:· | 00041140:·2f2a·2e66·7275·6c65·0a23·2053·6f2c·206c··/*.frule.#·So,·l | ||
| 00041150:· | 00041150:·6f6f·7020·6f76·6572·2074·6865·2065·6e74··oop·over·the·ent | ||
| 00041160:· | 00041160:·7269·6573·2069·6e20·5253·5953·4c4f·475f··ries·in·RSYSLOG_ | ||
| 00041170:· | 00041170:·434f·4e46·4947·5320·616e·6420·7573·6520··CONFIGS·and·use· | ||
| 00041180:·6 | 00041180:·6669·6e64·2074·6f20·6765·7420·7468·6520··find·to·get·the· | ||
| 00041190:· | 00041190:·6c69·7374·206f·6620·696e·636c·7564·6564··list·of·included | ||
| 000411a0:· | 000411a0:·2066·696c·6573·2e0a·5253·5953·4c4f·475f···files..RSYSLOG_ | ||
| 000411b0:· | 000411b0:·434f·4e46·4947·5f46·494c·4553·3d28·290a··CONFIG_FILES=(). | ||
| 000411c0:· | 000411c0:·666f·7220·454e·5452·5920·696e·2022·247b··for·ENTRY·in·"${ | ||
| 000411d0:· | 000411d0:·5253·5953·4c4f·475f·434f·4e46·4947·535b··RSYSLOG_CONFIGS[ | ||
| 000411e0:· | 000411e0:·405d·7d22·0a64·6f0a·0923·2049·6620·6469··@]}".do..#·If·di | ||
| 000411f0:·7 | 000411f0:·7265·6374·6f72·792c·2072·7379·736c·6f67··rectory,·rsyslog | ||
| 00041200:· | 00041200:·2077·696c·6c20·7365·6172·6368·2066·6f72···will·search·for | ||
| 00041210:· | 00041210:·2063·6f6e·6669·6720·6669·6c65·7320·696e···config·files·in | ||
| 00041220:·20 | 00041220:·2072·6563·7572·7369·7665·6c79·2e0a·0923···recursively...# | ||
| 00041230:· | 00041230:·2048·6f77·6576·6572·2c20·6669·6c65·7320···However,·files· | ||
| 00041240:·6 | 00041240:·696e·2068·6964·6465·6e20·7375·622d·6469··in·hidden·sub-di | ||
| 00041250:· | 00041250:·7265·6374·6f72·6965·7320·6f72·2068·6964··rectories·or·hid | ||
| 00041260:· | 00041260:·6465·6e20·6669·6c65·7320·7769·6c6c·2062··den·files·will·b | ||
| Max diff block lines reached; 1192142/1298844 bytes (91.78%) of diff not shown. | |||
| Offset 289, 14 lines modified | Offset 289, 140 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP-007- |
| 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 299 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 300 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·-q·'^installed'; | ||
| 301 | then | ||
| 302 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 303 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 304 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 305 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 306 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value·of | ||
| 307 | IncludeConfig) | ||
| 308 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 309 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 310 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 311 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 312 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 313 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 314 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 315 | '%s\\n'·"${INCPATH}";·done) | ||
| 316 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 317 | declare·-a·LOG_FILE_PATHS | ||
| 318 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 319 | RSYSLOG_CONFIGS=() | ||
| 320 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 321 | {RSYSLOG_INCLUDE[@]}") | ||
| 322 | #·Get·full·list·of·files·to·be·checked | ||
| 323 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 324 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 325 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 326 | included·files. | ||
| 327 | RSYSLOG_CONFIG_FILES=() | ||
| 328 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 329 | do | ||
| 330 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 331 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 332 | » if·[·-d·"${ENTRY}"·] | ||
| 333 | » then | ||
| 334 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 336 | » elif·[·-f·"${ENTRY}"·] | ||
| 337 | » then | ||
| 338 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 339 | » else | ||
| 340 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 341 | » fi | ||
| 342 | done | ||
| 343 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 344 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 345 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 346 | do | ||
| 347 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 348 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 349 | ('$')·characters, | ||
| 350 | » #·*·Ignore·empty·lines, | ||
| 351 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 352 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 353 | not·log·files | ||
| 354 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 355 | path | ||
| 356 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if·all | ||
| 357 | of·the | ||
| 358 | » #·following·are·met: | ||
| 359 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 360 | » #·*·it·is·preceded·by·space | ||
| 361 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 362 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 363 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 364 | » then | ||
| 365 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 366 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 367 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 368 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 369 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 370 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 371 | {FILTERED_PATHS}") | ||
| 372 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 373 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 374 | newline),·split | ||
| 375 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 376 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 377 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 378 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 379 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 380 | » » #·Delete·the·temporary·array | ||
| 381 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 382 | » fi | ||
| 383 | done | ||
| 384 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 385 | regex·is·a·bit | ||
| 386 | #·curly: | ||
| 387 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 388 | #·extract·File="logfile"·expression | ||
| 389 | #·match·only·"logfile"·expression | ||
| 390 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 391 | do | ||
| 392 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 393 | "${LOG_FILE}") | ||
| 394 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 395 | alnum:][:punct:]]*)\"\s*\)") | ||
| 396 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 397 | ]]*)\""|tr·-d·"\"")") | ||
| 398 | done | ||
| 399 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 400 | FILE_CMD="chgrp" | ||
| 401 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 402 | do | ||
| 403 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 404 | further·processing | ||
| 405 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 406 | » then | ||
| 407 | » » continue | ||
| 408 | » fi | ||
| Max diff block lines reached; 148471/154117 bytes (96.34%) of diff not shown. | |||
| Offset 15079, 188 lines modified | Offset 15079, 188 lines modified | ||
| 0003ae60:·7461·7267·6574·3d22·2369·646d·3237·3633··target="#idm2763 | 0003ae60:·7461·7267·6574·3d22·2369·646d·3237·3633··target="#idm2763 | ||
| 0003ae70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ae70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ae80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ae80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ae90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ae90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003aea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003aea0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003aeb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003aeb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aec0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aed0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003aee0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003aef0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003af00:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a | 0003aed0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003aee0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003aef0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003af00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003af10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003af20:·3d22·6964·6d32·3736·3322·3e3c·7072·653e··="idm2763"><pre> | |||
| 0003af30:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003af40:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003af50:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003af60:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af | 0003af70:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003af30:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af40:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003af50:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003af60:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003af70:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003af80:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003af | 0003af80:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003af90:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003afa0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003afb0:·3d22·2369·646d·3237·3634·2220·7461·6269··="#idm2764"·tabi | |||
| 0003afc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003afd0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003afe0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003aff0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b000:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b010:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b020:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b030:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b040:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b050:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b060:·2269·646d·3237·3634·223e·3c74·6162·6c65··"idm2764"><table | |||
| 0003b070:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b080:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b090:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b0a0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b0b0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003 | 0003b0c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b0e0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b100:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b110:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003b120:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b130:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b140:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b150:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b160:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b170:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b180:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b190:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b1a0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b1b0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003afc0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003afd0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003afe0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003aff0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b000:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b010:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b020:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b030:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b040:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b050:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b060:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b070:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b080:·5354·4947·2d55·4254·552d·3230·2d30·3130··STIG-UBTU-20-010 | |||
| 0003b090:·3435·300a·2020·2d20·4e49·5354·2d38·3030··450.··-·NIST-800 | |||
| 0003b0a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b0b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b0c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b0d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b0e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b0f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b100:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b110:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b120:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b130:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b140:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b150:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b160:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b170:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b180:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b190:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b1a0:·6e74·0a20·2077·6865·6e3a·2027·226c·696e··nt.··when:·'"lin | |||
| 0003b1b0:·7578·2d62·6173·6522·2069·6e20·616e·7369··ux-base"·in·ansi | |||
| 0003b1c0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b1d0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b1e0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b1f0:·2d20·4449·5341·2d53·5449·472d·5542·5455··-·DISA-STIG-UBTU | |||
| 0003b200:·2d32·302d·3031·3034·3530·0a20·202d·204e··-20-010450.··-·N | |||
| 0003b210:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b220:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b230:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b240:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b250:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b260:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b270:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b280:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b290:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b2a0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b2b0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b2c0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b2d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b2f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b300:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b320:·6d32·3736·3422·2074·6162·696e·6465·783d··m2764"·tabindex= | |||
| 0003b330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b380:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b390:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b3a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| Max diff block lines reached; 16624463/16649055 bytes (99.85%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 45 lines modified | ||
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 118 | ············_\x8c_\x8i_\x8s············1.4.1 | 118 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 144 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 145 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 154 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 155 | ··package_facts: |
| Offset 153, 45 lines modified | Offset 184, 14 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 186 | ··-·low_complexity |
| 156 | ··-·low_disruption | 187 | ··-·low_disruption |
| 157 | ··-·medium_severity | 188 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 171 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 189 | $·sudo·aideinit | 193 | $·sudo·aideinit |
| 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a | 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a |
| 192 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 196 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 193 | newly-generated·database·can·be·installed·as·follows: | 197 | newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 41 lines modified | ||
| 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 221 | ············_\x8c_\x8i_\x8s············1.4.1 | 221 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 228 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 229 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 230 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 231 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 232 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 233 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 234 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 235 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 236 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 237 | fi | ||
| 238 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 241 | fi | ||
| 242 | /usr/sbin/aideinit·-y·-f | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1151619/1156684 bytes (99.56%) of diff not shown. | |||
| Offset 15122, 188 lines modified | Offset 15122, 188 lines modified | ||
| 0003b110:·6574·3d22·2369·646d·3239·3235·2220·7461··et="#idm2925"·ta | 0003b110:·6574·3d22·2369·646d·3239·3235·2220·7461··et="#idm2925"·ta | ||
| 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b120:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b130:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b140:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b150:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b160:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b170:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b180:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b190:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1c0:·6964·3d22·6964·6d32·3932·3522·3e3c·7461··id="idm2925"><ta | |||
| 0003b1d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b1e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b1f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b200:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b210:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b220:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b230:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b180:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b190:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1d0:·6d32·3932·3522·3e3c·7072·653e·3c63·6f64··m2925"><pre><cod | |||
| 0003b1e0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b1f0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b200:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b210:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b220:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b230:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b240:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b250:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b260:·646d·3239·3236·2220·7461·6269·6e64·6578··dm2926"·tabindex | |||
| 0003b270:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b280:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b290:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b2b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b2c0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b2d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b300:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b310:·3239·3236·223e·3c74·6162·6c65·2063·6c61··2926"><table·cla | |||
| 0003b320:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b330:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b340:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b350:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b360:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b370:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b260:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003b380:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b390:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b3a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b3b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b3c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b3d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b3e0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b3f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b400:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b410:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b420:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b430:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b440:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b450:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b460:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b290:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b2b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2c0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b2d0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b2e0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b2f0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b300:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b310:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b320:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b330:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b340:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b350:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b360:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b370:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b380:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b390:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b3e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b3f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b400:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b410:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b420:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b430:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b440:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b450:·2077·6865·6e3a·2027·226c·696e·7578·2d62···when:·'"linux-b | |||
| 0003b460:·6173·6522·2069·6e20·616e·7369·626c·655f··ase"·in·ansible_ | |||
| 0003b470:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003b480:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b490:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b4a0:·5341·2d53·5449·472d·5542·5455·2d32·322d··SA-STIG-UBTU-22- | |||
| 0003b4b0:·3635·3130·3130·0a20·202d·204e·4953·542d··651010.··-·NIST- | |||
| 0003b4c0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b4d0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b4e0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b4f0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b500:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b510:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b520:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b530:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b540:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b550:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b560:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b570:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b580:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b590:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b5a0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b5b0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5c0:·2d74·6172·6765·743d·2223·6964·6d32·3932··-target="#idm292 | |||
| 0003b5d0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003b5e0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b5f0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b600:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b610:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b620:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b630:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b640:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| Max diff block lines reached; 7376635/7401227 bytes (99.67%) of diff not shown. | |||
| Offset 125, 14 lines modified | Offset 125, 45 lines modified | ||
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 128 | ············_\x8c_\x8i_\x8s············1.3.1 | 128 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 153 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 154 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 155 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 164 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 165 | ··package_facts: |
| Offset 163, 45 lines modified | Offset 194, 14 lines modified | ||
| 163 | ··-·PCI-DSSv4-11.5.2 | 194 | ··-·PCI-DSSv4-11.5.2 |
| 164 | ··-·enable_strategy | 195 | ··-·enable_strategy |
| 165 | ··-·low_complexity | 196 | ··-·low_complexity |
| 166 | ··-·low_disruption | 197 | ··-·low_disruption |
| 167 | ··-·medium_severity | 198 | ··-·medium_severity |
| 168 | ··-·no_reboot_needed | 199 | ··-·no_reboot_needed |
| 169 | ··-·package_aide_installed | 200 | ··-·package_aide_installed |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 181 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 182 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | include·install_aide | ||
| 192 | class·install_aide·{ | ||
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 202 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·aideinit | 203 | $·sudo·aideinit |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 204 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 205 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 202 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 206 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 203 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 228, 14 lines modified | Offset 228, 41 lines modified | ||
| 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 228 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 229 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 229 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 231 | ············_\x8c_\x8i_\x8s············1.3.1 | 231 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 232 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 232 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 233 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 233 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 236 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 237 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 238 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 239 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 240 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 241 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 242 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 243 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 244 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 245 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 246 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 247 | fi | ||
| 248 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 249 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 250 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 251 | fi | ||
| 252 | /usr/sbin/aideinit·-y·-f | ||
| 253 | else | ||
| 254 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 255 | fi | ||
| 235 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 256 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 961101/966158 bytes (99.48%) of diff not shown. | |||
| Offset 15112, 188 lines modified | Offset 15112, 188 lines modified | ||
| 0003b070:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b070:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b080:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | 0003b080:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | ||
| 0003b090:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b090:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b0a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b0a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b0b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b0b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b0c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b0c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b0d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b0d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b0e0:·6d65·6469·6174·696f·6e20·4 | 0003b0e0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0f0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b100:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b110:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b120:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b130:·6d32·3932·3522·3e3c·7461·626c·6520·636c··m2925"><table·cl | |||
| 0003b140:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b150:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b160:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b170:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b180:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b190:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b0f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b100:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b110:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b120:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b130:·7365·2220·6964·3d22·6964·6d32·3932·3522··se"·id="idm2925" | |||
| 0003b140:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b150:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b160:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b170:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b180:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b190:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1c0:·7461·7267·6574·3d22·2369·646d·3239·3236··target="#idm2926 | |||
| 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b230:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b240:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b250:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b260:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b270:·6522·2069·643d·2269·646d·3239·3236·223e··e"·id="idm2926"> | |||
| 0003b280:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b290:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b2a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b2b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b2c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b2d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b2e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b1d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b | 0003b2f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b300:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b1f | 0003b310:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b320:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b330:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b340:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b350:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b360:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b370:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b380:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b390:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b3a0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b3b0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b3c0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b3d0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b210:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b220:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b230:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b240:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b250:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b260:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b270:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b280:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b290:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b2a0:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b2b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b2c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b2d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b2e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b2f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b300:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b310:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b320:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b330:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b340:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b350:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b360:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b370:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b380:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b390:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b3a0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b3b0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b3c0:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | |||
| 0003b3d0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b3e0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b3f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b400:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b410:·472d·5542·5455·2d32·322d·3635·3130·3130··G-UBTU-22-651010 | |||
| 0003b420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b430:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b440:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b450:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b460:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b470:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b480:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b490:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b4b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b4c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b4d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b4e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b4f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b500:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b510:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b520:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b530:·743d·2223·6964·6d32·3932·3622·2074·6162··t="#idm2926"·tab | |||
| 0003b540:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b550:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b560:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b570:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b580:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b590:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b5a0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b5b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b5c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| Max diff block lines reached; 7217095/7241687 bytes (99.66%) of diff not shown. | |||
| Offset 123, 14 lines modified | Offset 123, 45 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 126 | ············_\x8c_\x8i_\x8s············1.3.1 | 126 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 152 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 153 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Gather·the·package·facts | 162 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 163 | ··package_facts: |
| Offset 161, 45 lines modified | Offset 192, 14 lines modified | ||
| 161 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 162 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 163 | ··-·low_complexity | 194 | ··-·low_complexity |
| 164 | ··-·low_disruption | 195 | ··-·low_disruption |
| 165 | ··-·medium_severity | 196 | ··-·medium_severity |
| 166 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 167 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | [[packages]] | ||
| 170 | name·=·"aide" | ||
| 171 | version·=·"*" | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 178 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 179 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 180 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·aideinit | 201 | $·sudo·aideinit |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 226, 14 lines modified | Offset 226, 41 lines modified | ||
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 229 | ············_\x8c_\x8i_\x8s············1.3.1 | 229 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 230 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 230 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 232 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 235 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 236 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 237 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 238 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 239 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 240 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 241 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 242 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 243 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 244 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 245 | fi | ||
| 246 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 247 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 248 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 249 | fi | ||
| 250 | /usr/sbin/aideinit·-y·-f | ||
| 251 | else | ||
| 252 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 253 | fi | ||
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 942364/947421 bytes (99.47%) of diff not shown. | |||
| Offset 15129, 188 lines modified | Offset 15129, 188 lines modified | ||
| 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b180:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b190:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | 0003b190:·646d·3239·3235·2220·7461·6269·6e64·6578··dm2925"·tabindex | ||
| 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b1a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b1b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b1c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b1d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b1e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b1f0:·6d65·6469·6174·696f·6e20·4 | 0003b1f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b200:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b210:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b220:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b230:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b240:·6d32·3932·3522·3e3c·7461·626c·6520·636c··m2925"><table·cl | |||
| 0003b250:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b260:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b270:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b280:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b290:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b2a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b2 | 0003b200:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b210:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b220:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b230:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b240:·7365·2220·6964·3d22·6964·6d32·3932·3522··se"·id="idm2925" | |||
| 0003b250:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b260:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b270:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b280:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b290:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b2a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b2b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b2c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b2d0:·7461·7267·6574·3d22·2369·646d·3239·3236··target="#idm2926 | |||
| 0003b2e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b2f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b300:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b310:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b320:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b330:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b340:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3239·3236·223e··e"·id="idm2926"> | |||
| 0003b390:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b3a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b3b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b3c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b3d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b3e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b3f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b2e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b2f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b400:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b410:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b420:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003b430:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b440:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b450:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b460:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b470:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b480:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b490:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b4a0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b4b0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b4c0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b4d0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b4e0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b320:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b330:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b340:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b350:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b360:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b370:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b380:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b390:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b3a0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b3b0:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b3c0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b3d0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b3e0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b3f0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b400:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b410:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b420:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b430:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b440:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b450:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b460:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b470:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b480:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b490:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b4a0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b4b0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b4c0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b4d0:·2027·226c·696e·7578·2d62·6173·6522·2069···'"linux-base"·i | |||
| 0003b4e0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b4f0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b500:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b510:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b520:·472d·5542·5455·2d32·322d·3635·3130·3130··G-UBTU-22-651010 | |||
| 0003b530:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b540:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b550:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b560:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b570:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b580:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b590:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5a0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5b0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b5c0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b5d0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b5e0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b5f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b600:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b610:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b620:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b630:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b640:·743d·2223·6964·6d32·3932·3622·2074·6162··t="#idm2926"·tab | |||
| 0003b650:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b660:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b670:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b680:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b690:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b6a0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b6b0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b6c0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| Max diff block lines reached; 21487969/21512561 bytes (99.89%) of diff not shown. | |||
| Offset 15125, 188 lines modified | Offset 15125, 188 lines modified | ||
| 0003b140:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | 0003b140:·612d·7461·7267·6574·3d22·2369·646d·3239··a-target="#idm29 | ||
| 0003b150:·3235·2220·7461·6269·6e64·6578·3d22·3022··25"·tabindex="0" | 0003b150:·3235·2220·7461·6269·6e64·6578·3d22·3022··25"·tabindex="0" | ||
| 0003b160:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b160:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b170:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b170:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b180:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b180:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b190:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b190:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1a0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1b0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b1c0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b1e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b1f0:·6170·7365·2220·6964·3d22·6964·6d32·3932··apse"·id="idm292 | |||
| 0003b200:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b210:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b220:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b230:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b240:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b250:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b260:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b | 0003b1b0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b1c0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b1d0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1e0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1f0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b200:·6964·3d22·6964·6d32·3932·3522·3e3c·7072··id="idm2925"><pr | |||
| 0003b210:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b220:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b230:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b240:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b250:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b260:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b270:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b280:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b290:·6574·3d22·2369·646d·3239·3236·2220·7461··et="#idm2926"·ta | |||
| 0003b2a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b2b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b2c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b2d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b2e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b2f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b300:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3239·3236·223e·3c74·6162··d="idm2926"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b450:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b460:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b470:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b480:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b490:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b2a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2d0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b2e0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b2f0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b300:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b310:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b320:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b330:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b340:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b350:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b360:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b370:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b380:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b390:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b3a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b3b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b3c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b3d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b3e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b3f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b400:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b410:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b420:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b430:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b440:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b450:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b460:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b470:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b480:·7365·6e74·0a20·2077·6865·6e3a·2027·226c··sent.··when:·'"l | |||
| 0003b490:·696e·7578·2d62·6173·6522·2069·6e20·616e··inux-base"·in·an | |||
| 0003b4a0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b4b0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b4c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b4d0:·2020·2d20·4449·5341·2d53·5449·472d·5542····-·DISA-STIG-UB | |||
| 0003b4e0:·5455·2d32·322d·3635·3130·3130·0a20·202d··TU-22-651010.··- | |||
| 0003b4f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b500:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b510:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b520:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b530:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b540:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b550:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b560:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b570:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b580:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b590:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b5a0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b5b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b5d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b5e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b600:·6964·6d32·3932·3622·2074·6162·696e·6465··idm2926"·tabinde | |||
| 0003b610:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b620:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b630:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b640:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b650:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b660:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| Max diff block lines reached; 21444031/21468623 bytes (99.89%) of diff not shown. | |||
| Offset 16531, 783 lines modified | Offset 16531, 783 lines modified | ||
| 00040920:·6574·3d22·2369·646d·3131·3631·3722·2074··et="#idm11617"·t | 00040920:·6574·3d22·2369·646d·3131·3631·3722·2074··et="#idm11617"·t | ||
| 00040930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00040930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00040940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00040950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00040960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00040970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (769 lines added, 769 lines removed) | |
| 00040980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00040980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 00040990:·20 | 00040990:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 000409a0:· | 000409a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 000409b0:· | 000409b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 000409c0:· | 000409c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 000409d0:· | 000409d0:·3d22·6964·6d31·3136·3137·223e·3c70·7265··="idm11617"><pre | ||
| 000409e0:· | 000409e0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 000409f0:· | 000409f0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 00040a00:· | 00040a00:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 00040a10:· | 00040a10:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 00040a20:· | 00040a20:·6470·6b67·2d71·7565·7279·202d·2d73·686f··dpkg-query·--sho | ||
| 00040a30:· | 00040a30:·7720·2d2d·7368·6f77·666f·726d·6174·3d27··w·--showformat=' | ||
| 00040a40:· | 00040a40:·247b·6462·3a53·7461·7475·732d·5374·6174··${db:Status-Stat | ||
| 00040a50:· | 00040a50:·7573·7d0a·2720·276c·696e·7578·2d62·6173··us}.'·'linux-bas | ||
| 00040a60:·6 | 00040a60:·6527·2032·2667·743b·2f64·6576·2f6e·756c··e'·2>/dev/nul | ||
| 00040a70:· | 00040a70:·6c20·7c20·6772·6570·202d·7120·5e69·6e73··l·|·grep·-q·^ins | ||
| 00040a80:· | 00040a80:·7461·6c6c·6564·2026·616d·703b·2661·6d70··talled·&& | ||
| 00040a90:· | 00040a90:·3b20·6470·6b67·2d71·7565·7279·202d·2d73··;·dpkg-query·--s | ||
| 00040aa0:· | 00040aa0:·686f·7720·2d2d·7368·6f77·666f·726d·6174··how·--showformat | ||
| 00040ab0:· | 00040ab0:·3d27·247b·6462·3a53·7461·7475·732d·5374··='${db:Status-St | ||
| 00040ac0:· | 00040ac0:·6174·7573·7d5c·6e27·2027·7273·7973·6c6f··atus}\n'·'rsyslo | ||
| 00040ad0:·6 | 00040ad0:·6727·2032·2667·743b·2f64·6576·2f6e·756c··g'·2>/dev/nul | ||
| 00040ae0:·6 | 00040ae0:·6c20·7c20·6772·6570·202d·7120·275e·696e··l·|·grep·-q·'^in | ||
| 00040af0:·7 | 00040af0:·7374·616c·6c65·6427·3b20·7468·656e·0a0a··stalled';·then.. | ||
| 00040b00:· | 00040b00:·2320·4c69·7374·206f·6620·6c6f·6720·6669··#·List·of·log·fi | ||
| 00040b10:· | 00040b10:·6c65·2070·6174·6873·2074·6f20·6265·2069··le·paths·to·be·i | ||
| 00040b20:· | 00040b20:·6e73·7065·6374·6564·2066·6f72·2063·6f72··nspected·for·cor | ||
| 00040b30:· | 00040b30:·7265·6374·2070·6572·6d69·7373·696f·6e73··rect·permissions | ||
| 00040b40:·0a2 | 00040b40:·0a23·202a·2050·7269·6d61·7269·6c79·2069··.#·*·Primarily·i | ||
| 00040b50:· | 00040b50:·6e73·7065·6374·206c·6f67·2066·696c·6520··nspect·log·file· | ||
| 00040b60:· | 00040b60:·7061·7468·7320·6c69·7374·6564·2069·6e20··paths·listed·in· | ||
| 00040b70:·2 | 00040b70:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 00040b80:· | 00040b80:·660a·5253·5953·4c4f·475f·4554·435f·434f··f.RSYSLOG_ETC_CO | ||
| 00040b90:· | 00040b90:·4e46·4947·3d22·2f65·7463·2f72·7379·736c··NFIG="/etc/rsysl | ||
| 00040ba0:· | 00040ba0:·6f67·2e63·6f6e·6622·0a23·202a·2041·6e64··og.conf".#·*·And | ||
| 00040bb0:·20 | 00040bb0:·2061·6c73·6f20·7468·6520·6c6f·6720·6669···also·the·log·fi | ||
| 00040bc0:·6 | 00040bc0:·6c65·2070·6174·6873·206c·6973·7465·6420··le·paths·listed· | ||
| 00040bd0:·6 | 00040bd0:·6166·7465·7220·7273·7973·6c6f·6727·7320··after·rsyslog's· | ||
| 00040be0:· | 00040be0:·2449·6e63·6c75·6465·436f·6e66·6967·2064··$IncludeConfig·d | ||
| 00040bf0:· | 00040bf0:·6972·6563·7469·7665·0a23·2020·2028·7374··irective.#···(st | ||
| 00040c00:· | 00040c00:·6f72·6520·7468·6520·7265·7375·6c74·2069··ore·the·result·i | ||
| 00040c10:· | 00040c10:·6e74·6f20·6172·7261·7920·666f·7220·7468··nto·array·for·th | ||
| 00040c20:·6 | 00040c20:·6520·6361·7365·2074·6865·7265·2773·2073··e·case·there's·s | ||
| 00040c30:· | 00040c30:·6865·6c6c·2067·6c6f·6220·7573·6564·2061··hell·glob·used·a | ||
| 00040c40:· | 00040c40:·7320·7661·6c75·6520·6f66·2049·6e63·6c75··s·value·of·Inclu | ||
| 00040c50:·65 | 00040c50:·6465·436f·6e66·6967·290a·7265·6164·6172··deConfig).readar | ||
| 00040c60:· | 00040c60:·7261·7920·2d74·204f·4c44·5f49·4e43·2026··ray·-t·OLD_INC·& | ||
| 00040c70:· | 00040c70:·6c74·3b20·266c·743b·2867·7265·7020·2d65··lt;·<(grep·-e | ||
| 00040c80:· | 00040c80:·2022·5c24·496e·636c·7564·6543·6f6e·6669···"\$IncludeConfi | ||
| 00040c90:·6 | 00040c90:·675b·5b3a·7370·6163·653a·5d5d·5c2b·5b5e··g[[:space:]]\+[^ | ||
| 00040ca0:· | 00040ca0:·5b3a·7370·6163·653a·5d3b·5d5c·2b22·202f··[:space:];]\+"·/ | ||
| 00040cb0:·6 | 00040cb0:·6574·632f·7273·7973·6c6f·672e·636f·6e66··etc/rsyslog.conf | ||
| 00040cc0:· | 00040cc0:·207c·2063·7574·202d·6420·2720·2720·2d66···|·cut·-d·'·'·-f | ||
| 00040cd0:· | 00040cd0:·2032·290a·7265·6164·6172·7261·7920·2d74···2).readarray·-t | ||
| 00040ce0:·2 | 00040ce0:·2052·5359·534c·4f47·5f49·4e43·4c55·4445···RSYSLOG_INCLUDE | ||
| 00040cf0:· | 00040cf0:·5f43·4f4e·4649·4720·266c·743b·2026·6c74··_CONFIG·<·< | ||
| 00040d00:· | 00040d00:·3b28·666f·7220·494e·4350·4154·4820·696e··;(for·INCPATH·in | ||
| 00040d10:·2 | 00040d10:·2022·247b·4f4c·445f·494e·435b·405d·7d22···"${OLD_INC[@]}" | ||
| 00040d20:· | 00040d20:·3b20·646f·2065·7661·6c20·7072·696e·7466··;·do·eval·printf | ||
| 00040d30:· | 00040d30:·2027·2573·5c5c·6e27·2022·247b·494e·4350···'%s\\n'·"${INCP | ||
| 00040d40:· | 00040d40:·4154·487d·223b·2064·6f6e·6529·0a72·6561··ATH}";·done).rea | ||
| 00040d50:· | 00040d50:·6461·7272·6179·202d·7420·4e45·575f·494e··darray·-t·NEW_IN | ||
| 00040d60:· | 00040d60:·4320·266c·743b·2026·6c74·3b28·7365·6420··C·<·<(sed· | ||
| 00040d70:· | 00040d70:·2d6e·2027·2f5e·5c73·2a69·6e63·6c75·6465··-n·'/^\s*include | ||
| 00040d80:·2 | 00040d80:·282f·2c2f·292f·4970·2720·2f65·7463·2f72··(/,/)/Ip'·/etc/r | ||
| 00040d90:· | 00040d90:·7379·736c·6f67·2e63·6f6e·6620·7c20·7365··syslog.conf·|·se | ||
| 00040da0:· | 00040da0:·6420·2d6e·2027·7340·2e2a·6669·6c65·5c73··d·-n·'s@.*file\s | ||
| 00040db0:· | 00040db0:·2a3d·5c73·2a22·5c28·5b2f·5b3a·616c·6e75··*=\s*"\([/[:alnu | ||
| 00040dc0:· | 00040dc0:·6d3a·5d5b·3a70·756e·6374·3a5d·5d2a·5c29··m:][:punct:]]*\) | ||
| 00040dd0:·2 | 00040dd0:·222e·2a40·5c31·4049·7027·290a·7265·6164··".*@\1@Ip').read | ||
| 00040de0:· | 00040de0:·6172·7261·7920·2d74·2052·5359·534c·4f47··array·-t·RSYSLOG | ||
| 00040df0:· | 00040df0:·5f49·4e43·4c55·4445·2026·6c74·3b20·266c··_INCLUDE·<·&l | ||
| 00040e00:· | 00040e00:·743b·2866·6f72·2049·4e43·5041·5448·2069··t;(for·INCPATH·i | ||
| 00040e10:·6 | 00040e10:·6e20·2224·7b4e·4557·5f49·4e43·5b40·5d7d··n·"${NEW_INC[@]} | ||
| 00040e20:· | 00040e20:·223b·2064·6f20·6576·616c·2070·7269·6e74··";·do·eval·print | ||
| 00040e30:·6 | 00040e30:·6620·2725·735c·5c6e·2720·2224·7b49·4e43··f·'%s\\n'·"${INC | ||
| 00040e40:· | 00040e40:·5041·5448·7d22·3b20·646f·6e65·290a·0a23··PATH}";·done)..# | ||
| 00040e50:· | 00040e50:·2044·6563·6c61·7265·2061·6e20·6172·7261···Declare·an·arra | ||
| 00040e60:· | 00040e60:·7920·746f·2068·6f6c·6420·7468·6520·6669··y·to·hold·the·fi | ||
| 00040e70:· | 00040e70:·6e61·6c20·6c69·7374·206f·6620·6469·6666··nal·list·of·diff | ||
| 00040e80:· | 00040e80:·6572·656e·7420·6c6f·6720·6669·6c65·2070··erent·log·file·p | ||
| 00040e90:· | 00040e90:·6174·6873·0a64·6563·6c61·7265·202d·6120··aths.declare·-a· | ||
| 00040ea0:· | 00040ea0:·4c4f·475f·4649·4c45·5f50·4154·4853·0a0a··LOG_FILE_PATHS.. | ||
| 00040eb0:· | 00040eb0:·2320·4172·7261·7920·746f·2068·6f6c·6420··#·Array·to·hold· | ||
| 00040ec0:·6 | 00040ec0:·616c·6c20·7273·7973·6c6f·6720·636f·6e66··all·rsyslog·conf | ||
| 00040ed0:· | 00040ed0:·6967·2065·6e74·7269·6573·0a52·5359·534c··ig·entries.RSYSL | ||
| 00040ee0:· | 00040ee0:·4f47·5f43·4f4e·4649·4753·3d28·290a·5253··OG_CONFIGS=().RS | ||
| 00040ef0:· | 00040ef0:·5953·4c4f·475f·434f·4e46·4947·533d·2822··YSLOG_CONFIGS=(" | ||
| 00040f00:· | 00040f00:·247b·5253·5953·4c4f·475f·4554·435f·434f··${RSYSLOG_ETC_CO | ||
| 00040f10:· | 00040f10:·4e46·4947·7d22·2022·247b·5253·5953·4c4f··NFIG}"·"${RSYSLO | ||
| 00040f20:· | 00040f20:·475f·494e·434c·5544·455f·434f·4e46·4947··G_INCLUDE_CONFIG | ||
| 00040f30:· | 00040f30:·5b40·5d7d·2220·2224·7b52·5359·534c·4f47··[@]}"·"${RSYSLOG | ||
| 00040f40:· | 00040f40:·5f49·4e43·4c55·4445·5b40·5d7d·2229·0a0a··_INCLUDE[@]}").. | ||
| 00040f50:·2 | 00040f50:·2320·4765·7420·6675·6c6c·206c·6973·7420··#·Get·full·list· | ||
| 00040f60:·6 | 00040f60:·6f66·2066·696c·6573·2074·6f20·6265·2063··of·files·to·be·c | ||
| 00040f70:· | 00040f70:·6865·636b·6564·0a23·2052·5359·534c·4f47··hecked.#·RSYSLOG | ||
| 00040f80:· | 00040f80:·5f43·4f4e·4649·4753·206d·6179·2063·6f6e··_CONFIGS·may·con | ||
| 00040f90:·7 | 00040f90:·7461·696e·2067·6c6f·6273·2073·7563·6820··tain·globs·such· | ||
| 00040fa0:· | 00040fa0:·6173·0a23·202f·6574·632f·7273·7973·6c6f··as.#·/etc/rsyslo | ||
| 00040fb0:·6 | 00040fb0:·672e·642f·2a2e·636f·6e66·202f·6574·632f··g.d/*.conf·/etc/ | ||
| 00040fc0:· | 00040fc0:·7273·7973·6c6f·672e·642f·2a2e·6672·756c··rsyslog.d/*.frul | ||
| 00040fd0:· | 00040fd0:·650a·2320·536f·2c20·6c6f·6f70·206f·7665··e.#·So,·loop·ove | ||
| 00040fe0:· | 00040fe0:·7220·7468·6520·656e·7472·6965·7320·696e··r·the·entries·in | ||
| 00040ff0:·2 | 00040ff0:·2052·5359·534c·4f47·5f43·4f4e·4649·4753···RSYSLOG_CONFIGS | ||
| 00041000:· | 00041000:·2061·6e64·2075·7365·2066·696e·6420·746f···and·use·find·to | ||
| 00041010:·2 | 00041010:·2067·6574·2074·6865·206c·6973·7420·6f66···get·the·list·of | ||
| 00041020:· | 00041020:·2069·6e63·6c75·6465·6420·6669·6c65·732e···included·files. | ||
| 00041030:· | 00041030:·0a52·5359·534c·4f47·5f43·4f4e·4649·475f··.RSYSLOG_CONFIG_ | ||
| 00041040:· | 00041040:·4649·4c45·533d·2829·0a66·6f72·2045·4e54··FILES=().for·ENT | ||
| 00041050:· | 00041050:·5259·2069·6e20·2224·7b52·5359·534c·4f47··RY·in·"${RSYSLOG | ||
| 00041060:· | 00041060:·5f43·4f4e·4649·4753·5b40·5d7d·220a·646f··_CONFIGS[@]}".do | ||
| 00041070:· | 00041070:·0a09·2320·4966·2064·6972·6563·746f·7279··..#·If·directory | ||
| 00041080:· | 00041080:·2c20·7273·7973·6c6f·6720·7769·6c6c·2073··,·rsyslog·will·s | ||
| 00041090:·6 | 00041090:·6561·7263·6820·666f·7220·636f·6e66·6967··earch·for·config | ||
| 000410a0:· | 000410a0:·2066·696c·6573·2069·6e20·7265·6375·7273···files·in·recurs | ||
| 000410b0:·6 | 000410b0:·6976·656c·792e·0a09·2320·486f·7765·7665··ively...#·Howeve | ||
| 000410c0:·7 | 000410c0:·722c·2066·696c·6573·2069·6e20·6869·6464··r,·files·in·hidd | ||
| 000410d0:· | 000410d0:·656e·2073·7562·2d64·6972·6563·746f·7269··en·sub-directori | ||
| 000410e0:·6 | 000410e0:·6573·206f·7220·6869·6464·656e·2066·696c··es·or·hidden·fil | ||
| 000410f0:· | 000410f0:·6573·2077·696c·6c20·6265·2069·676e·6f72··es·will·be·ignor | ||
| Max diff block lines reached; 1193039/1299741 bytes (91.79%) of diff not shown. | |||
| Offset 289, 14 lines modified | Offset 289, 140 lines modified | ||
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 290 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 291 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 292 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 294 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 295 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 299 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 300 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·-q·'^installed'; | ||
| 301 | then | ||
| 302 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 303 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 304 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 305 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 306 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 307 | of·IncludeConfig) | ||
| 308 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+"·/ | ||
| 309 | etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 310 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 311 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 312 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed·- | ||
| 313 | n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 314 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 315 | '%s\\n'·"${INCPATH}";·done) | ||
| 316 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 317 | declare·-a·LOG_FILE_PATHS | ||
| 318 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 319 | RSYSLOG_CONFIGS=() | ||
| 320 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 321 | {RSYSLOG_INCLUDE[@]}") | ||
| 322 | #·Get·full·list·of·files·to·be·checked | ||
| 323 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 324 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 325 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 326 | included·files. | ||
| 327 | RSYSLOG_CONFIG_FILES=() | ||
| 328 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 329 | do | ||
| 330 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 331 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 332 | » if·[·-d·"${ENTRY}"·] | ||
| 333 | » then | ||
| 334 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 335 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 336 | » elif·[·-f·"${ENTRY}"·] | ||
| 337 | » then | ||
| 338 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 339 | » else | ||
| 340 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 341 | » fi | ||
| 342 | done | ||
| 343 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 344 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default·configuration) | ||
| 345 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 346 | do | ||
| 347 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 348 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 349 | ('$')·characters, | ||
| 350 | » #·*·Ignore·empty·lines, | ||
| 351 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 352 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 353 | not·log·files | ||
| 354 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 355 | path | ||
| 356 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 357 | all·of·the | ||
| 358 | » #·following·are·met: | ||
| 359 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 360 | » #·*·it·is·preceded·by·space | ||
| 361 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';')·characters | ||
| 362 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 363 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 364 | » then | ||
| 365 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 366 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 367 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 368 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 369 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 370 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 371 | {FILTERED_PATHS}") | ||
| 372 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 373 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 374 | newline),·split | ||
| 375 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 376 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 377 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 378 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 379 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 380 | » » #·Delete·the·temporary·array | ||
| 381 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 382 | » fi | ||
| 383 | done | ||
| 384 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so·grep | ||
| 385 | regex·is·a·bit | ||
| 386 | #·curly: | ||
| 387 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 388 | #·extract·File="logfile"·expression | ||
| 389 | #·match·only·"logfile"·expression | ||
| 390 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 391 | do | ||
| 392 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 393 | "${LOG_FILE}") | ||
| 394 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 395 | alnum:][:punct:]]*)\"\s*\)") | ||
| 396 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 397 | ]]*)\""|tr·-d·"\"")") | ||
| 398 | done | ||
| 399 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 400 | FILE_CMD="chgrp" | ||
| 401 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 402 | do | ||
| 403 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 404 | further·processing | ||
| 405 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 406 | » then | ||
| 407 | » » continue | ||
| 408 | » fi | ||
| Max diff block lines reached; 152156/157806 bytes (96.42%) of diff not shown. | |||
| Offset 15079, 188 lines modified | Offset 15079, 188 lines modified | ||
| 0003ae60:·6172·6765·743d·2223·6964·6d32·3932·3522··arget="#idm2925" | 0003ae60:·6172·6765·743d·2223·6964·6d32·3932·3522··arget="#idm2925" | ||
| 0003ae70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ae70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003ae80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003ae80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ae90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ae90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003aea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003aea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003aeb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003aeb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003aed0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aee0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aef0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003af00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003af10:·6522·2069·643d·2269·646d·3239·3235·223e··e"·id="idm2925"> | |||
| 0003af20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003af30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003af40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003af50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003af60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003af70:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003af80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a | 0003aed0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003aee0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003aef0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003af10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af20:·2269·646d·3239·3235·223e·3c70·7265·3e3c··"idm2925"><pre>< | |||
| 0003af30:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003af40:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003af50:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003af60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003af70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003af80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003af90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003afa0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003afb0:·2223·6964·6d32·3932·3622·2074·6162·696e··"#idm2926"·tabin | |||
| 0003afc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003afd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003afe0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003aff0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b000:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b010:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b020:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b030:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b040:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b050:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b060:·6964·6d32·3932·3622·3e3c·7461·626c·6520··idm2926"><table· | |||
| 0003b070:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b080:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b090:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b0a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b0b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003 | 0003b0c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003b0d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003 | 0003b0e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003 | 0003b0f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003 | 0003b100:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003 | 0003b110:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b120:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b130:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b140:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b150:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b160:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b170:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b180:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b190:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b1a0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b1b0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b000:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b010:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b020:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b030:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b040:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b050:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b060:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b070:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b080:·5449·472d·5542·5455·2d32·322d·3635·3130··TIG-UBTU-22-6510 | |||
| 0003b090:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b0a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b0b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b0c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b0d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b0e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b0f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b100:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b110:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b120:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b130:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b140:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b150:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b160:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b170:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b180:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b190:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b1a0:·740a·2020·7768·656e·3a20·2722·6c69·6e75··t.··when:·'"linu | |||
| 0003b1b0:·782d·6261·7365·2220·696e·2061·6e73·6962··x-base"·in·ansib | |||
| 0003b1c0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b1d0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b1e0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b1f0:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b200:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b210:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b220:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b230:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b240:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b250:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b260:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b270:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b280:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b290:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b2a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b2b0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b2c0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b2d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b2e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b2f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b300:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b310:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b320:·3239·3236·2220·7461·6269·6e64·6578·3d22··2926"·tabindex=" | |||
| 0003b330:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b340:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b350:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b360:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b370:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b380:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b390:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b3a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b3b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b3c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| Max diff block lines reached; 17085050/17109642 bytes (99.86%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 45 lines modified | ||
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 118 | ············_\x8c_\x8i_\x8s············1.3.1 | 118 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260582r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 144 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 145 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 154 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 155 | ··package_facts: |
| Offset 153, 45 lines modified | Offset 184, 14 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 186 | ··-·low_complexity |
| 156 | ··-·low_disruption | 187 | ··-·low_disruption |
| 157 | ··-·medium_severity | 188 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 171 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 189 | $·sudo·aideinit | 193 | $·sudo·aideinit |
| 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 192 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 196 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 193 | generated·database·can·be·installed·as·follows: | 197 | generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 41 lines modified | ||
| 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 218 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 219 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 | 220 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651015 |
| 221 | ············_\x8c_\x8i_\x8s············1.3.1 | 221 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule | 224 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-260583r958944_rule |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 228 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 229 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 230 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 231 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 232 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 233 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 234 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 235 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 236 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 237 | fi | ||
| 238 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 239 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 240 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 241 | fi | ||
| 242 | /usr/sbin/aideinit·-y·-f | ||
| 243 | else | ||
| 244 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 245 | fi | ||
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1217009/1222067 bytes (99.59%) of diff not shown. | |||
| Offset 15092, 184 lines modified | Offset 15092, 184 lines modified | ||
| 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | ||
| 0003af40:·3639·2220·7461·6269·6e64·6578·3d22·3022··69"·tabindex="0" | 0003af40:·3639·2220·7461·6269·6e64·6578·3d22·3022··69"·tabindex="0" | ||
| 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003afb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003afd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003afe0:·6170·7365·2220·6964·3d22·6964·6d32·3536··apse"·id="idm256 | |||
| 0003aff0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b000:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b010:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b020:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b030:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b040:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b050:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003 | 0003afa0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003afb0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d32·3536·3922·3e3c·7072··id="idm2569"><pr | |||
| 0003b000:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b010:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b020:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b030:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b040:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b050:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b060:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b070:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b080:·6574·3d22·2369·646d·3235·3730·2220·7461··et="#idm2570"·ta | |||
| 0003b090:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b0a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b0b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b0c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b0d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b0e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b0f0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b120:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b130:·643d·2269·646d·3235·3730·223e·3c74·6162··d="idm2570"><tab | |||
| 0003b140:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b150:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b160:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b170:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b180:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b190:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b1a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b1b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b090:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b0a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b0e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b0f0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b100:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b110:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b120:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b130:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b140:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b150:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b160:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b170:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b180:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b190:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b1a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1b0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1c0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1d0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b1e0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1f0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b200:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b210:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b220:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b230:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b240:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b250:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b260:·2722·6c69·6e75·782d·6261·7365·2220·696e··'"linux-base"·in | |||
| 0003b270:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b280:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b290:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b2a0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b2b0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2c0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2d0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b2e0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b2f0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b300:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b310:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b320:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b330:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b340:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b350:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b360:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b370:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b380:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b390:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b3a0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b3b0:·6765·743d·2223·6964·6d32·3537·3022·2074··get="#idm2570"·t | |||
| 0003b3c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b3d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b400:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b410:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b420:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b430:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b440:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b450:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b460:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b470:·646d·3235·3730·223e·3c70·7265·3e3c·636f··dm2570"><pre><co | |||
| 0003b480:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b490:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b4a0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b4b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b4d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b4e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b4f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b500:·6964·6d32·3537·3122·2074·6162·696e·6465··idm2571"·tabinde | |||
| 0003b510:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b520:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| Max diff block lines reached; 9218165/9242205 bytes (99.74%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 45 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.3.1 | 126 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 150 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 151 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 161 | ··package_facts: |
| Offset 157, 45 lines modified | Offset 188, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 190 | ··-·low_complexity |
| 160 | ··-·low_disruption | 191 | ··-·low_disruption |
| 161 | ··-·medium_severity | 192 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 175 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 176 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 177 | else | ||
| 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 179 | fi | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | include·install_aide | ||
| 186 | class·install_aide·{ | ||
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·aideinit | 197 | $·sudo·aideinit |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location | 199 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location |
| 196 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can | 200 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can |
| 197 | be·installed·as·follows: | 201 | be·installed·as·follows: |
| Offset 220, 14 lines modified | Offset 220, 41 lines modified | ||
| 220 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 220 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 221 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 221 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 222 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 225 | ············_\x8c_\x8i_\x8s············6.3.1 | 225 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 230 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 231 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 232 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 233 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 234 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 235 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 236 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 237 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 238 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 239 | fi | ||
| 240 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 241 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 242 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 243 | fi | ||
| 244 | /usr/sbin/aideinit·-y·-f | ||
| 245 | else | ||
| 246 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 247 | fi | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1208427/1213546 bytes (99.58%) of diff not shown. | |||
| Offset 15083, 185 lines modified | Offset 15083, 185 lines modified | ||
| 0003aea0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003aea0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003aeb0:·6964·6d32·3536·3922·2074·6162·696e·6465··idm2569"·tabinde | 0003aeb0:·6964·6d32·3536·3922·2074·6162·696e·6465··idm2569"·tabinde | ||
| 0003aec0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003aec0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aed0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aed0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003aee0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003aee0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003aef0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003aef0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003af00:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003af00:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003af10:·656d·6564·6961·7469·6f6e·204 | 0003af10:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003af20:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003af30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003af40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003af50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af60:·646d·3235·3639·223e·3c74·6162·6c65·2063··dm2569"><table·c | |||
| 0003af70:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003af80:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003af90:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003afa0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003afb0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003afc0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003af | 0003af20:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003af30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af60:·7073·6522·2069·643d·2269·646d·3235·3639··pse"·id="idm2569 | |||
| 0003af70:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003af80:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003af90:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003afa0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003afb0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003afc0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003afd0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003afe0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003aff0:·2d74·6172·6765·743d·2223·6964·6d32·3537··-target="#idm257 | |||
| 0003b000:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b010:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b020:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b030:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b040:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b050:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b060:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b070:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b080:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b090:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0a0:·7365·2220·6964·3d22·6964·6d32·3537·3022··se"·id="idm2570" | |||
| 0003b0b0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b0c0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b0d0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0e0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b0f0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003b100:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003 | 0003b110:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b120:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b000:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b010:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b020:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b030:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b040:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b050:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b060:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b070:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b080:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b090:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b0a0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b0b0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b0c0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b0d0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b0e0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b0f0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b100:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b110:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b120:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b130:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b140:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b150:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b160:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b170:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b180:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b190:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b1a0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b1b0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b1c0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b1d0:·6865·6e3a·2027·226c·696e·7578·2d62·6173··hen:·'"linux-bas | |||
| 0003b1e0:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003b1f0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b200:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b210:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b220:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b230:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b240:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b250:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b260:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b270:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b280:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b290:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b2a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b2b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b2c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b2d0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b2e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b2f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b300:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b310:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b320:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | |||
| 0003b330:·3730·2220·7461·6269·6e64·6578·3d22·3022··70"·tabindex="0" | |||
| 0003b340:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b350:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b360:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b370:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b380:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b390:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b3a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b3b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b3c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b3d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b3e0:·6964·3d22·6964·6d32·3537·3022·3e3c·7072··id="idm2570"><pr | |||
| 0003b3f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b400:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b410:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b420:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b430:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b440:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b450:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b460:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b470:·6574·3d22·2369·646d·3235·3731·2220·7461··et="#idm2571"·ta | |||
| 0003b480:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b490:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b4a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| Max diff block lines reached; 8970107/8994285 bytes (99.73%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 45 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.3.1 | 125 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 149 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 150 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Gather·the·package·facts | 159 | -·name:·Gather·the·package·facts |
| 133 | ··package_facts: | 160 | ··package_facts: |
| Offset 156, 45 lines modified | Offset 187, 14 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 187 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 188 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 189 | ··-·low_complexity |
| 159 | ··-·low_disruption | 190 | ··-·low_disruption |
| 160 | ··-·medium_severity | 191 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 192 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 193 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 173 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 174 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·aideinit | 196 | $·sudo·aideinit |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 194 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location | 198 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure·location |
| 195 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can | 199 | (such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can |
| 196 | be·installed·as·follows: | 200 | be·installed·as·follows: |
| Offset 219, 14 lines modified | Offset 219, 41 lines modified | ||
| 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ············_\x8c_\x8i_\x8s············6.3.1 | 224 | ············_\x8c_\x8i_\x8s············6.3.1 |
| 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 229 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 230 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 231 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 232 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 233 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 234 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 235 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 236 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 237 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 238 | fi | ||
| 239 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 240 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 241 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 242 | fi | ||
| 243 | /usr/sbin/aideinit·-y·-f | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 1173905/1179024 bytes (99.57%) of diff not shown. | |||
| Offset 15127, 184 lines modified | Offset 15127, 184 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3235·3639·2220·7461··et="#idm2569"·ta | 0003b160:·6574·3d22·2369·646d·3235·3639·2220·7461··et="#idm2569"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b1e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b200:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b210:·6964·3d22·6964·6d32·3536·3922·3e3c·7461··id="idm2569"><ta | |||
| 0003b220:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b230:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b240:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b250:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b260:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b270:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b1d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b1e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b220:·6d32·3536·3922·3e3c·7072·653e·3c63·6f64··m2569"><pre><cod | |||
| 0003b230:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b240:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b250:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b260:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b270:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b280:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b290:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2b0:·646d·3235·3730·2220·7461·6269·6e64·6578··dm2570"·tabindex | |||
| 0003b2c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b2e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b300:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b310:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b320:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b330:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b340:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b350:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b360:·3235·3730·223e·3c74·6162·6c65·2063·6c61··2570"><table·cla | |||
| 0003b370:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b380:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b390:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3a0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3b0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b3c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b3d0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b2c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b300:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b310:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b320:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b330:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b340:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b350:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b360:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b370:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b380:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b390:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b3a0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b3b0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b3c0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b3d0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b3e0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b3f0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b400:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b410:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b420:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b430:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b440:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b450:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b460:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b470:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b480:·740a·2020·7768·656e·3a20·2722·6c69·6e75··t.··when:·'"linu | |||
| 0003b490:·782d·6261·7365·2220·696e·2061·6e73·6962··x-base"·in·ansib | |||
| 0003b4a0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b4b0:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b4c0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b4d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b4e0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b4f0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b500:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b510:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b520:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b530:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b540:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b550:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b560:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b570:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b580:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b590:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5a0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b5b0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b5c0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5d0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b5e0:·6964·6d32·3537·3022·2074·6162·696e·6465··idm2570"·tabinde | |||
| 0003b5f0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b600:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b610:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b620:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b630:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b640:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b650:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b660:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b670:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b680:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b690:·7073·6522·2069·643d·2269·646d·3235·3730··pse"·id="idm2570 | |||
| 0003b6a0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b6b0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b6c0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b6d0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b6e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b700:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b710:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b720:·2d74·6172·6765·743d·2223·6964·6d32·3537··-target="#idm257 | |||
| 0003b730:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b740:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b750:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| Max diff block lines reached; 19768432/19792472 bytes (99.88%) of diff not shown. | |||
| Offset 15123, 184 lines modified | Offset 15123, 184 lines modified | ||
| 0003b120:·6765·743d·2223·6964·6d32·3536·3922·2074··get="#idm2569"·t | 0003b120:·6765·743d·2223·6964·6d32·3536·3922·2074··get="#idm2569"·t | ||
| 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b190:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b1a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b1b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b1c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b1d0:·2069·643d·2269·646d·3235·3639·223e·3c74···id="idm2569"><t | |||
| 0003b1e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b1f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b200:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b210:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b220:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b230:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b240:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b190:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b1a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b1b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b1c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b1d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b1e0:·646d·3235·3639·223e·3c70·7265·3e3c·636f··dm2569"><pre><co | |||
| 0003b1f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b200:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b210:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b220:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b230:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b240:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b250:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b260:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b270:·6964·6d32·3537·3022·2074·6162·696e·6465··idm2570"·tabinde | |||
| 0003b280:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b290:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b2a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b2b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b2c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b2d0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b2e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b2f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b300:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b310:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b320:·6d32·3537·3022·3e3c·7461·626c·6520·636c··m2570"><table·cl | |||
| 0003b330:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b340:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b350:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b360:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b370:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b380:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b390:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b280:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b290:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b2b0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b2d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b2e0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b2f0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b300:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b310:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b320:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b330:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b340:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b350:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b360:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b370:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b380:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b390:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b3a0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b3b0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b3c0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b3d0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b3e0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b3f0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b400:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b410:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b420:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b430:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b440:·6e74·0a20·2077·6865·6e3a·2027·226c·696e··nt.··when:·'"lin | |||
| 0003b450:·7578·2d62·6173·6522·2069·6e20·616e·7369··ux-base"·in·ansi | |||
| 0003b460:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b470:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b480:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b490:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b4a0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b4b0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b4c0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b4d0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b4e0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b4f0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b500:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b510:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b520:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b530:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b540:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b550:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b560:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b570:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b580:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b590:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b5a0:·2369·646d·3235·3730·2220·7461·6269·6e64··#idm2570"·tabind | |||
| 0003b5b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b5c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b5d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b5e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b5f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b600:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b610:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b620:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b630:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b640:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b650:·6170·7365·2220·6964·3d22·6964·6d32·3537··apse"·id="idm257 | |||
| 0003b660:·3022·3e3c·7072·653e·3c63·6f64·653e·0a5b··0"><pre><code>.[ | |||
| 0003b670:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b680:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b690:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b6a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b6b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b6c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b6d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b6e0:·612d·7461·7267·6574·3d22·2369·646d·3235··a-target="#idm25 | |||
| 0003b6f0:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 0003b700:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b710:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| Max diff block lines reached; 19697106/19721146 bytes (99.88%) of diff not shown. | |||
| Offset 3, 7113 lines modified | Offset 3, 7185 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_settimeofday_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-s | 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-s | 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_g | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify· | 23 | ······<ocil:title>Verify·Group·Who·Owns·group·File</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_g | 25 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_media_export_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Exporting·to·Media·(successful)</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_media_export_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_home_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Ensure·/home·Located·On·Separate·Partition</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-partition_for_home_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_passwd_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Permissions·on·passwd·File</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable· | 53 | ······<ocil:title>Disable·hibernation</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_FIPS_certified_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Set·Password·Maximum·Age</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_maximum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_pub_key_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-auditd_write_logs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Write·Audit·Logs·to·the·Disk</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-auditd_write_logs_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Enable·checks·on·credential·management</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_debug_credentials_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_memory_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>R | 95 | ······<ocil:title>Randomize·the·kernel·memory·sections</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_randomize_memory_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_minimum_age_login_defs_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Set·Password·Minimum·Age</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_minimum_age_login_defs_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-s | 118 | ····<ocil:questionnaire·id="ocil:ssg-selinux_not_disabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Ensure·SELinux·is·Not·Disabled</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-s | 121 | ········<ocil:test_action_ref>ocil:ssg-selinux_not_disabled_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_audit_ocil:questionnaire:1"> | ||
| 125 | ···· | 124 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> |
| 125 | ······<ocil:title>Disable·storing·core·dump</ocil:title> | ||
| Max diff block lines reached; 663914/676600 bytes (98.13%) of diff not shown. | |||
| Offset 3, 2789 lines modified | Offset 3, 2789 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchownat</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchownat_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_kexec_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 11 | ······<ocil:title>Disable·kexec·system·call</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_kexec_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> | ||
| 23 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchownat</ocil:title> | ||
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchownat_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_stig_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disallow·Configuration·to·Bypass·Password·Requirements·for·Privilege·Escalation</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-disallow_bypass_password_sudo_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·/var/log·Located·On·Separate·Partition</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Set·Default·iptables·Policy·for·Incoming·Packets</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-set_iptables_default_rule_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-no_direct_root_logins_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Direct·root·Logins·Not·Allowed</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-no_direct_root_logins_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_systemmap_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·Permissions·on· | 47 | ······<ocil:title>Verify·Permissions·on·System.map·Files</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_systemmap_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-service_auditd_enabled_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Enable·auditd·Service</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-service_auditd_enabled_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> | ||
| 65 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_login_grace_time_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·SSH·LoginGraceTime·is·configured</ocil:title> | ||
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_login_grace_time_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_group_ocil:questionnaire:1"> | ||
| 71 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-package_syslogng_installed_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·syslog-ng·is·Installed</ocil:title> | ||
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-package_syslogng_installed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_audit_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·/var/log/audit·Located·On·Separate·Partition</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_postfix_installed_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>The·Postfix·package·is·installed</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_postfix_installed_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_private_key_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-a | 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-a | 91 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_error_action_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_var_tmp_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·SMAP·is·not·disabled·during·boot</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmap_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_permissions_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·System·Log·Files·Have·Correct·Permissions</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_permissions_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| Max diff block lines reached; 694184/706231 bytes (98.29%) of diff not shown. | |||
| Offset 3, 6630 lines modified | Offset 3, 6630 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Set·Password·Warning·Age</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_warn_age_login_defs_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_page_table_isolation_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 11 | ······<ocil:title>Remove·the·kernel·mapping·in·user·mode</ocil:title> |
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_page_table_isolation_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_postfix_installed_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>The·Postfix·package·is·installed</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-package_postfix_installed_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_gssapi_auth_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable· | 23 | ······<ocil:title>Enable·GSSAPI·Authentication</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_gssapi_auth_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pubkey_auth_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Enable·Public·Key·Authentication</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_openat_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·openat</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_openat_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>En | 41 | ······<ocil:title>Enable·seccomp·to·safely·compute·untrusted·bytecode</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlink_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·unlink</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_unlink_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 53 | ······<ocil:title>Verify·Permissions·on·/var/log/messages·File</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> | ||
| 71 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_installed_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Install·the·OpenSSH·Server·Package</ocil:title> | ||
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-a | 61 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_installed_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_tipc_disabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Disable·TIPC·Support</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_tipc_disabled_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_remote_loghost_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·Logs·Sent·To·Remote·Host</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_remote_loghost_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_bashrc_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·the·Default·Bash·Umask·is·Set·Correctly</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_bashrc_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure· | 83 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-package_samba_removed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Uninstall·Samba·Package</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-package_samba_removed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-cle | 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_send_redirects_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Disable·Kernel·Parameter·for·Sending·ICMP·Redirects·on·all·IPv4·Interfaces</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-cle | 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_send_redirects_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-service_ufw_enabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Verify·ufw·Enabled</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-service_ufw_enabled_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_postqueue_ocil:questionnaire:1"> | ||
| 125 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> | ||
| 126 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1353720/1366067 bytes (99.10%) of diff not shown. | |||
| Offset 3, 4192 lines modified | Offset 3, 4192 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_uefi_password_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Set·the·UEFI·Boot·Loader·Password</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_uefi_password_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/syslog·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-package_systemd-journal-remote_installed_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_audit_binaries_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·that·audit·tools·Have·Mode·0755·or·less</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_audit_binaries_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_debug_credentials_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_mount_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·mount</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_mount_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·kmod</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_kmod_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_x86_vsyscall_emulation_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Disable·x86·vsyscall·emulation</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_x86_vsyscall_emulation_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fremovexattr_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fremovexattr</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fremovexattr_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_syslog_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·User·Who·Owns·/var/log/syslog·File</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_library_dirs_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·that·Shared·Library·Files·Have·Root·Ownership</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-s | 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_sessions_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Set·SSH·MaxSessions·limit</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-s | 73 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_max_sessions_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·hibernation</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_umount_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·umount</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_umount_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_cups_removed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Uninstall·CUPS·Package</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_cups_removed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_crontab_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lsetxattr_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lsetxattr</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lsetxattr_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_requiretty_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·requiretty</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_requiretty_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_gshadow_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_ownership_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·User</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 1417206/1429568 bytes (99.14%) of diff not shown. | |||
| Offset 3, 2543 lines modified | Offset 3, 2543 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_configure_pool_and_server_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Chrony·Configure·Pool·and·Server</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-chronyd_configure_pool_and_server_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-s | 16 | ····<ocil:questionnaire·id="ocil:ssg-service_autofs_disabled_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·the·Automounter</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-s | 19 | ········<ocil:test_action_ref>ocil:ssg-service_autofs_disabled_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_passwd_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify· | 23 | ······<ocil:title>Verify·Permissions·on·Backup·passwd·File</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-file_ | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_tipc_disabled_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·TIPC·Support</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_tipc_disabled_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-service_timesyncd_enabled_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-service_timesyncd_enabled_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·systemd_timesyncd·Service</ocil:title> | 35 | ······<ocil:title>Enable·systemd_timesyncd·Service</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-service_timesyncd_enabled_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-service_timesyncd_enabled_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-package_vsftpd_removed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Uninstall·vsftpd·Package</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-package_vsftpd_removed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_profile_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·/etc/profile</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_profile_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-pa | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_cron_installed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Install·the·cron·service</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-pa | 55 | ········<ocil:test_action_ref>ocil:ssg-package_cron_installed_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_maxrepeat_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_yama_ptrace_scope_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Restrict·usage·of·ptrace·to·descendant·processes</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_yama_ptrace_scope_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-postfix_network_listening_disabled_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv4·Interfaces</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_at_deny_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_min_life_existing_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Set·Existing·Passwords·Minimum·Age</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_min_life_existing_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_openldap-clients_removed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·LDAP·client·is·not·installed</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_openldap-clients_removed_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Configure·auditd·ma | 89 | ······<ocil:title>Configure·auditd·mail_acct·Action·on·Low·Disk·Space</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_ | 91 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_action_mail_acct_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_n | 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_interactive_home_directory_exists_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>All·Interactive·Users·Home·Directories·Must·Exist</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_n | 97 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_interactive_home_directory_exists_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-account_disable_post_pw_expiration_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify·Permissions·on·Backup·gshadow·File</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_creat_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-· | 107 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·creat</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_ | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_creat_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-service_httpd_disabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Disable·apache2·Service</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-service_httpd_disabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·Group·Who·Owns·group·File</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfacl_ocil:questionnaire:1"> |
| Max diff block lines reached; 892452/904643 bytes (98.65%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····197 | 2 | -rw-r--r--···0········0········0·····1976·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··12 | 3 | -rw-r--r--···0········0········0··1228344·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15996, 146 lines modified | Offset 15996, 146 lines modified | ||
| 0003e7b0:·6765·743d·2223·6964·6d31·3935·3722·2074··get="#idm1957"·t | 0003e7b0:·6765·743d·2223·6964·6d31·3935·3722·2074··get="#idm1957"·t | ||
| 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e820:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e830:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e840:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e850:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e860:·3d22·6964·6d31·3935·3722·3e3c·7461·626c··="idm1957"><tabl | |||
| 0003e870:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e880:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e890:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e8a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e8b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e8e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e900:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e910:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e920:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e930:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e940:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003e950:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e960:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003e970:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003e980:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003e990:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003e9a0:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003e9b0:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003e9c0:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003e9d0:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003e9e0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003e9f0:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003ea00:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003ea10:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003ea20:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ea30:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ea40:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ea50:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ea60:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ea70:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ea80:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ea90:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003eaa0:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003eab0:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003eac0:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ead0:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003eae0:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003eaf0:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003eb00:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003eb10:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eb20:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003eb30:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003eb40:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003eb50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003eb60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003eb70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003eb80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003eb90:·6765·743d·2223·6964·6d31·3935·3822·2074··get="#idm1958"·t | |||
| 0003eba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ebb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ebc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ebd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ebe0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ebf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003ec00:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003ec10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003ec20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003ec30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003ec40:·2069·643d·2269·646d·3139·3538·223e·3c74···id="idm1958"><t | ||
| 0003e | 0003ec50:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003ec60:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003ec70:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003ec80:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003e8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003e8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003e940:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003e950:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e960:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003e970:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | |||
| 0003e980:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | |||
| 0003e990:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | |||
| 0003e9a0:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | |||
| 0003e9b0:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | |||
| 0003e9c0:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | |||
| 0003e9d0:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | |||
| 0003e9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003e9f0:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003ea00:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | |||
| 0003ea10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ea20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ea30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ea40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ea50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ea60:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ea70:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | |||
| 0003ea80:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | |||
| 0003ea90:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | |||
| 0003eaa0:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | |||
| 0003eab0:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | |||
| 0003eac0:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | |||
| 0003ead0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003eae0:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | |||
| 0003eaf0:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | |||
| 0003eb00:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb10:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | |||
| 0003eb20:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | |||
| 0003eb30:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | |||
| 0003eb40:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | |||
| 0003eb50:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | |||
| 0003eb60:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | |||
| 0003eb70:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | |||
| 0003eb80:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | |||
| 0003eb90:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | |||
| 0003eba0:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | |||
| 0003ebb0:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | |||
| Max diff block lines reached; 1101724/1120520 bytes (98.32%) of diff not shown. | |||
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| 355 | ··-·medium_severity | 376 | ··-·medium_severity |
| 356 | ··-·no_reboot_needed | 377 | ··-·no_reboot_needed |
| 357 | ··-·restrict_strategy | 378 | ··-·restrict_strategy |
| 358 | ··-·sudo_remove_nopasswd | 379 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 131317/136765 bytes (96.02%) of diff not shown. | |||
| Offset 16016, 146 lines modified | Offset 16016, 146 lines modified | ||
| 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | ||
| 0003e900:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003e900:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003e960:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003e970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003e980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003e990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003e9a0:·2220·6964·3d22·6964·6d31·3935·3722·3e3c··"·id="idm1957">< | |||
| 0003e9b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003e9c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003e9d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003e9e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003e9f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ea00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ea10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ea30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea40:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ea50:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ea60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea70:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ea80:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ea90:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003eaa0:·7265·3e3c·636f·6465·3e0a·666f·7220·6620··re><code>.for·f· | |||
| 0003eab0:·696e·202f·6574·632f·7375·646f·6572·7320··in·/etc/sudoers· | |||
| 0003eac0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f2a··/etc/sudoers.d/* | |||
| 0003ead0:·203b·2064·6f0a·2020·6966·205b·2021·202d···;·do.··if·[·!·- | |||
| 0003eae0:·6520·2224·6622·205d·203b·2074·6865·6e0a··e·"$f"·]·;·then. | |||
| 0003eaf0:·2020·2020·636f·6e74·696e·7565·0a20·2066······continue.··f | |||
| 0003eb00:·690a·2020·6d61·7463·6869·6e67·5f6c·6973··i.··matching_lis | |||
| 0003eb10:·743d·2428·6772·6570·202d·5020·275e·283f··t=$(grep·-P·'^(? | |||
| 0003eb20:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb30:·656e·7469·6361·7465·2e2a·2427·2024·6620··enticate.*$'·$f· | |||
| 0003eb40:·7c20·756e·6971·2029·0a20·2069·6620·2120··|·uniq·).··if·!· | |||
| 0003eb50:·7465·7374·202d·7a20·2224·6d61·7463·6869··test·-z·"$matchi | |||
| 0003eb60:·6e67·5f6c·6973·7422·3b20·7468·656e·0a20··ng_list";·then.· | |||
| 0003eb70:·2020·2077·6869·6c65·2049·4653·3d20·7265·····while·IFS=·re | |||
| 0003eb80:·6164·202d·7220·656e·7472·793b·2064·6f0a··ad·-r·entry;·do. | |||
| 0003eb90:·2020·2020·2020·2320·636f·6d6d·656e·7420········#·comment· | |||
| 0003eba0:·6f75·7420·2221·6175·7468·656e·7469·6361··out·"!authentica | |||
| 0003ebb0:·7465·2220·6d61·7463·6865·7320·746f·2070··te"·matches·to·p | |||
| 0003ebc0:·7265·7365·7276·6520·7573·6572·2064·6174··reserve·user·dat | |||
| 0003ebd0:·610a·2020·2020·2020·7365·6420·2d69·2022··a.······sed·-i·" | |||
| 0003ebe0:·732f·5e24·7b65·6e74·7279·7d24·2f23·2026··s/^${entry}$/#·& | |||
| 0003ebf0:·616d·703b·2f67·2220·2466·0a20·2020·2064··amp;/g"·$f.····d | |||
| 0003ec00:·6f6e·6520·266c·743b·266c·743b·266c·743b··one·<<< | |||
| 0003ec10:·2022·246d·6174·6368·696e·675f·6c69·7374···"$matching_list | |||
| 0003ec20:·220a·0a20·2020·202f·7573·722f·7362·696e··"..····/usr/sbin | |||
| 0003ec30:·2f76·6973·7564·6f20·2d63·6620·2466·2026··/visudo·-cf·$f·& | |||
| 0003ec40:·616d·703b·2667·743b·202f·6465·762f·6e75··amp;>·/dev/nu | |||
| 0003ec50:·6c6c·207c·7c20·6563·686f·2022·4661·696c··ll·||·echo·"Fail | |||
| 0003ec60:·2074·6f20·7661·6c69·6461·7465·2024·6620···to·validate·$f· | |||
| 0003ec70:·7769·7468·2076·6973·7564·6f22·0a20·2066··with·visudo".··f | |||
| 0003ec80:·690a·646f·6e65·0a3c·2f63·6f64·653e·3c2f··i.done.</code></ | |||
| 0003ec90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003eca0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ecb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ecc0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ecd0:·2d74·6172·6765·743d·2223·6964·6d31·3935··-target="#idm195 | |||
| 0003ece0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003ecf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ed00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ed10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ed20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ed30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003e | 0003ed40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003e | 0003ed50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003e | 0003ed60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003e | 0003ed70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003e | 0003ed80:·7073·6522·2069·643d·2269·646d·3139·3538··pse"·id="idm1958 | ||
| 0003e | 0003ed90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003e9c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003e9d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003e9e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003e9f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ea00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ea10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ea30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ea50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ea60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ea70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ea80:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ea90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003eaa0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003eab0:·6d65·3a20·4669·6e64·202f·6574·632f·7375··me:·Find·/etc/su | |||
| 0003eac0:·646f·6572·732e·642f·2066·696c·6573·0a20··doers.d/·files.· | |||
| 0003ead0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | |||
| 0003eae0:·2e66·696e·643a·0a20·2020·2070·6174·6873··.find:.····paths | |||
| 0003eaf0:·3a0a·2020·2020·2d20·2f65·7463·2f73·7564··:.····-·/etc/sud | |||
| 0003eb00:·6f65·7273·2e64·2f0a·2020·7265·6769·7374··oers.d/.··regist | |||
| 0003eb10:·6572·3a20·7375·646f·6572·730a·2020·7461··er:·sudoers.··ta | |||
| 0003eb20:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003eb30:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003eb40:·4e49·5354·2d38·3030·2d35·332d·4941·2d31··NIST-800-53-IA-1 | |||
| 0003eb50:·310a·2020·2d20·6c6f·775f·636f·6d70·6c65··1.··-·low_comple | |||
| 0003eb60:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003eb70:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003eb80:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003eb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003eba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003ebb0:·7261·7465·6779·0a20·202d·2073·7564·6f5f··rategy.··-·sudo_ | |||
| 0003ebc0:·7265·6d6f·7665·5f6e·6f5f·6175·7468·656e··remove_no_authen | |||
| 0003ebd0:·7469·6361·7465·0a0a·2d20·6e61·6d65·3a20··ticate..-·name:· | |||
| 0003ebe0:·5265·6d6f·7665·206c·696e·6573·2063·6f6e··Remove·lines·con | |||
| 0003ebf0:·7461·696e·696e·6720·2161·7574·6865·6e74··taining·!authent | |||
| 0003ec00:·6963·6174·6520·6672·6f6d·2073·7564·6f65··icate·from·sudoe | |||
| 0003ec10:·7273·2066·696c·6573·0a20·2061·6e73·6962··rs·files.··ansib | |||
| 0003ec20:·6c65·2e62·7569·6c74·696e·2e72·6570·6c61··le.builtin.repla | |||
| 0003ec30:·6365·3a0a·2020·2020·7265·6765·7870·3a20··ce:.····regexp:· | |||
| 0003ec40:·285e·283f·2123·292e·2a5b·5c73·5d2b·5c21··(^(?!#).*[\s]+\! | |||
| 0003ec50:·6175·7468·656e·7469·6361·7465·2e2a·2429··authenticate.*$) | |||
| 0003ec60:·0a20·2020·2072·6570·6c61·6365·3a20·2723··.····replace:·'# | |||
| 0003ec70:·205c·6726·6c74·3b31·2667·743b·270a·2020···\g<1>'.·· | |||
| 0003ec80:·2020·7061·7468·3a20·277b·7b20·6974·656d····path:·'{{·item | |||
| 0003ec90:·2e70·6174·6820·7d7d·270a·2020·2020·7661··.path·}}'.····va | |||
| 0003eca0:·6c69·6461·7465·3a20·2f75·7372·2f73·6269··lidate:·/usr/sbi | |||
| 0003ecb0:·6e2f·7669·7375·646f·202d·6366·2025·730a··n/visudo·-cf·%s. | |||
| 0003ecc0:·2020·7769·7468·5f69·7465·6d73·3a0a·2020····with_items:.·· | |||
| 0003ecd0:·2d20·7061·7468·3a20·2f65·7463·2f73·7564··-·path:·/etc/sud | |||
| 0003ece0:·6f65·7273·0a20·202d·2027·7b7b·2073·7564··oers.··-·'{{·sud | |||
| 0003ecf0:·6f65·7273·2e66·696c·6573·207d·7d27·0a20··oers.files·}}'.· | |||
| Max diff block lines reached; 1242003/1260799 bytes (98.51%) of diff not shown. | |||
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| 359 | ··-·medium_severity | 380 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 381 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 382 | ··-·restrict_strategy |
| 362 | ··-·sudo_remove_nopasswd | 383 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 148167/153615 bytes (96.45%) of diff not shown. | |||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b80:·3935·3722·2074·6162·696e·6465·783d·2230··957"·tabindex="0 | 00039b80:·3935·3722·2074·6162·696e·6465·783d·2230··957"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d31·3935·3722··se"·id="idm1957" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 00039f60:·3935·3822·2074·6162·696e·6465·783d·2230··958"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3139··lapse"·id="idm19 | |||
| 00039c30:·3537·223e·3c74·6162·6c65·2063·6c61·7373··57"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| 00039e80:·6e74·6963·6174·6520·6672·6f6d·2073·7564··nticate·from·sud | |||
| 00039e90:·6f65·7273·2066·696c·6573·0a20·2061·6e73··oers·files.··ans | |||
| 00039ea0:·6962·6c65·2e62·7569·6c74·696e·2e72·6570··ible.builtin.rep | |||
| 00039eb0:·6c61·6365·3a0a·2020·2020·7265·6765·7870··lace:.····regexp | |||
| 00039ec0:·3a20·285e·283f·2123·292e·2a5b·5c73·5d2b··:·(^(?!#).*[\s]+ | |||
| 00039ed0:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | |||
| 00039ee0:·2429·0a20·2020·2072·6570·6c61·6365·3a20··$).····replace:· | |||
| 00039ef0:·2723·205c·6726·6c74·3b31·2667·743b·270a··'#·\g<1>'. | |||
| 00039f00:·2020·2020·7061·7468·3a20·277b·7b20·6974······path:·'{{·it | |||
| 00039f10:·656d·2e70·6174·6820·7d7d·270a·2020·2020··em.path·}}'.···· | |||
| 00039f20:·7661·6c69·6461·7465·3a20·2f75·7372·2f73··validate:·/usr/s | |||
| 00039f30:·6269·6e2f·7669·7375·646f·202d·6366·2025··bin/visudo·-cf·% | |||
| 00039f40:·730a·2020·7769·7468·5f69·7465·6d73·3a0a··s.··with_items:. | |||
| 00039f50:·2020·2d20·7061·7468·3a20·2f65·7463·2f73····-·path:·/etc/s | |||
| 00039f60:·7564·6f65·7273·0a20·202d·2027·7b7b·2073··udoers.··-·'{{·s | |||
| 00039f70:·7564·6f65·7273·2e66·696c·6573·207d·7d27··udoers.files·}}' | |||
| Max diff block lines reached; 361044/379840 bytes (95.05%) of diff not shown. | |||
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| 219 | ··-·medium_severity | 240 | ··-·medium_severity |
| 220 | ··-·no_reboot_needed | 241 | ··-·no_reboot_needed |
| 221 | ··-·restrict_strategy | 242 | ··-·restrict_strategy |
| 222 | ··-·sudo_remove_nopasswd | 243 | ··-·sudo_remove_nopasswd |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 229 | ··if·[·!·-e·"$f"·]·;·then | ||
| 230 | ····continue | ||
| 231 | ··fi | ||
| 232 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 233 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 47216/52661 bytes (89.66%) of diff not shown. | |||
| Offset 16006, 146 lines modified | Offset 16006, 146 lines modified | ||
| 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e860:·2223·6964·6d31·3935·3722·2074·6162·696e··"#idm1957"·tabin | 0003e860:·2223·6964·6d31·3935·3722·2074·6162·696e··"#idm1957"·tabin | ||
| 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e8d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e8e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e8f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e900:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e910:·6d31·3935·3722·3e3c·7461·626c·6520·636c··m1957"><table·cl | |||
| 0003e920:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e930:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e940:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e950:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e960:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e970:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e980:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e990:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e9a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e9b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e9c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e9d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e9e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e9f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ea00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ea10:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003ea20:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003ea30:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003ea40:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003ea50:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003ea60:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea70:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea80:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea90:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003eaa0:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003eab0:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003eac0:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ead0:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003eae0:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003eaf0:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003eb00:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eb10:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eb20:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eb30:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003eb40:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eb50:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eb60:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb70:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb80:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb90:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eba0:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003ebb0:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003ebc0:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003ebd0:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003ebe0:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003ebf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ec00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ec10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ec20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ec30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ec40:·2223·6964·6d31·3935·3822·2074·6162·696e··"#idm1958"·tabin | |||
| 0003ec50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ec60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003eca0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003ecb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003ecc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003ecd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003e910:·2269·646d·3139·3537·223e·3c74·6162·6c65··"idm1957"><table | |||
| 0003e920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003e930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003e940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003e950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003e960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003e970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003e980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003e990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003e9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003e9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003e9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003e9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003e9f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ea00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ea10:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | |||
| 0003ea20:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003ea30:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | |||
| 0003ea40:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | |||
| 0003ea50:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | |||
| 0003ea60:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | |||
| 0003ea70:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | |||
| 0003ea80:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | |||
| 0003ea90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003eaa0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003eab0:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | |||
| 0003eac0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ead0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003eae0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003eaf0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003eb00:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003eb10:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003eb20:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | |||
| 0003eb30:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | |||
| 0003eb40:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | |||
| 0003eb50:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | |||
| 0003eb60:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | |||
| 0003eb70:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | |||
| 0003eb80:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb90:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | |||
| 0003eba0:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | |||
| 0003ebb0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003ebc0:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | |||
| 0003ebd0:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | |||
| 0003ebe0:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | |||
| 0003ebf0:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | |||
| 0003ec00:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | |||
| 0003ec10:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | |||
| 0003ec20:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | |||
| 0003ec30:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | |||
| 0003ec40:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | |||
| 0003ec50:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | |||
| Max diff block lines reached; 1197979/1216775 bytes (98.46%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| 357 | ··-·medium_severity | 378 | ··-·medium_severity |
| 358 | ··-·no_reboot_needed | 379 | ··-·no_reboot_needed |
| 359 | ··-·restrict_strategy | 380 | ··-·restrict_strategy |
| 360 | ··-·sudo_remove_nopasswd | 381 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 143447/148895 bytes (96.34%) of diff not shown. | |||
| Offset 16213, 777 lines modified | Offset 16213, 777 lines modified | ||
| 0003f540:·6172·6765·743d·2223·6964·6d35·3037·3022··arget="#idm5070" | 0003f540:·6172·6765·743d·2223·6964·6d35·3037·3022··arget="#idm5070" | ||
| 0003f550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003f550:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003f560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003f560:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003f570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003f570:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003f580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003f580:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003f590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003f590:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | Diff chunk too large, falling back to line-by-line diff (763 lines added, 763 lines removed) | |
| 0003f5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003f5a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003f5b0:·6f6e·20 | 0003f5b0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003f5c0:· | 0003f5c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003f5d0:·6 | 0003f5d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003f5e0:·6 | 0003f5e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003f5f0:·6 | 0003f5f0:·6964·3d22·6964·6d35·3037·3022·3e3c·7072··id="idm5070"><pr | ||
| 0003f600:· | 0003f600:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003f610:·6 | 0003f610:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0003f620:·6 | 0003f620:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0003f630:· | 0003f630:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0003f640:·2 | 0003f640:·2064·706b·672d·7175·6572·7920·2d2d·7368···dpkg-query·--sh | ||
| 0003f650:· | 0003f650:·6f77·202d·2d73·686f·7766·6f72·6d61·743d··ow·--showformat= | ||
| 0003f660:· | 0003f660:·2724·7b64·623a·5374·6174·7573·2d53·7461··'${db:Status-Sta | ||
| 0003f670:·74 | 0003f670:·7475·737d·0a27·2027·6c69·6e75·782d·6261··tus}.'·'linux-ba | ||
| 0003f680:·7 | 0003f680:·7365·2720·3226·6774·3b2f·6465·762f·6e75··se'·2>/dev/nu | ||
| 0003f690:·6 | 0003f690:·6c6c·207c·2067·7265·7020·2d71·205e·696e··ll·|·grep·-q·^in | ||
| 0003f6a0:· | 0003f6a0:·7374·616c·6c65·6420·2661·6d70·3b26·616d··stalled·&&am | ||
| 0003f6b0:· | 0003f6b0:·703b·2064·706b·672d·7175·6572·7920·2d2d··p;·dpkg-query·-- | ||
| 0003f6c0:·7 | 0003f6c0:·7368·6f77·202d·2d73·686f·7766·6f72·6d61··show·--showforma | ||
| 0003f6d0:· | 0003f6d0:·743d·2724·7b64·623a·5374·6174·7573·2d53··t='${db:Status-S | ||
| 0003f6e0:· | 0003f6e0:·7461·7475·737d·5c6e·2720·2772·7379·736c··tatus}\n'·'rsysl | ||
| 0003f6f0:·6 | 0003f6f0:·6f67·2720·3226·6774·3b2f·6465·762f·6e75··og'·2>/dev/nu | ||
| 0003f700:·6 | 0003f700:·6c6c·207c·2067·7265·7020·2d71·2027·5e69··ll·|·grep·-q·'^i | ||
| 0003f710:· | 0003f710:·6e73·7461·6c6c·6564·273b·2074·6865·6e0a··nstalled';·then. | ||
| 0003f720:· | 0003f720:·0a23·204c·6973·7420·6f66·206c·6f67·2066··.#·List·of·log·f | ||
| 0003f730:· | 0003f730:·696c·6520·7061·7468·7320·746f·2062·6520··ile·paths·to·be· | ||
| 0003f740:·6 | 0003f740:·696e·7370·6563·7465·6420·666f·7220·636f··inspected·for·co | ||
| 0003f750:· | 0003f750:·7272·6563·7420·7065·726d·6973·7369·6f6e··rrect·permission | ||
| 0003f760:· | 0003f760:·730a·2320·2a20·5072·696d·6172·696c·7920··s.#·*·Primarily· | ||
| 0003f770:· | 0003f770:·696e·7370·6563·7420·6c6f·6720·6669·6c65··inspect·log·file | ||
| 0003f780:· | 0003f780:·2070·6174·6873·206c·6973·7465·6420·696e···paths·listed·in | ||
| 0003f790:· | 0003f790:·202f·6574·632f·7273·7973·6c6f·672e·636f···/etc/rsyslog.co | ||
| 0003f7a0:· | 0003f7a0:·6e66·0a52·5359·534c·4f47·5f45·5443·5f43··nf.RSYSLOG_ETC_C | ||
| 0003f7b0:·4 | 0003f7b0:·4f4e·4649·473d·222f·6574·632f·7273·7973··ONFIG="/etc/rsys | ||
| 0003f7c0:· | 0003f7c0:·6c6f·672e·636f·6e66·220a·2320·2a20·416e··log.conf".#·*·An | ||
| 0003f7d0:· | 0003f7d0:·6420·616c·736f·2074·6865·206c·6f67·2066··d·also·the·log·f | ||
| 0003f7e0:· | 0003f7e0:·696c·6520·7061·7468·7320·6c69·7374·6564··ile·paths·listed | ||
| 0003f7f0:· | 0003f7f0:·2061·6674·6572·2072·7379·736c·6f67·2773···after·rsyslog's | ||
| 0003f800:· | 0003f800:·2024·496e·636c·7564·6543·6f6e·6669·6720···$IncludeConfig· | ||
| 0003f810:· | 0003f810:·6469·7265·6374·6976·650a·2320·2020·2873··directive.#···(s | ||
| 0003f820:· | 0003f820:·746f·7265·2074·6865·2072·6573·756c·7420··tore·the·result· | ||
| 0003f830:· | 0003f830:·696e·746f·2061·7272·6179·2066·6f72·2074··into·array·for·t | ||
| 0003f840:· | 0003f840:·6865·2063·6173·6520·7468·6572·6527·7320··he·case·there's· | ||
| 0003f850:· | 0003f850:·7368·656c·6c20·676c·6f62·2075·7365·6420··shell·glob·used· | ||
| 0003f860:·6 | 0003f860:·6173·2076·616c·7565·206f·6620·496e·636c··as·value·of·Incl | ||
| 0003f870:·6 | 0003f870:·7564·6543·6f6e·6669·6729·0a72·6561·6461··udeConfig).reada | ||
| 0003f880:· | 0003f880:·7272·6179·202d·7420·4f4c·445f·494e·4320··rray·-t·OLD_INC· | ||
| 0003f890:· | 0003f890:·266c·743b·2026·6c74·3b28·6772·6570·202d··<·<(grep·- | ||
| 0003f8a0:·20 | 0003f8a0:·6520·225c·2449·6e63·6c75·6465·436f·6e66··e·"\$IncludeConf | ||
| 0003f8b0:· | 0003f8b0:·6967·5b5b·3a73·7061·6365·3a5d·5d5c·2b5b··ig[[:space:]]\+[ | ||
| 0003f8c0:· | 0003f8c0:·5e5b·3a73·7061·6365·3a5d·3b5d·5c2b·2220··^[:space:];]\+"· | ||
| 0003f8d0:· | 0003f8d0:·2f65·7463·2f72·7379·736c·6f67·2e63·6f6e··/etc/rsyslog.con | ||
| 0003f8e0:·2072· | 0003f8e0:·6620·7c20·6375·7420·2d64·2027·2027·202d··f·|·cut·-d·'·'·- | ||
| 0003f8f0:·66 | 0003f8f0:·6620·3229·0a72·6561·6461·7272·6179·202d··f·2).readarray·- | ||
| 0003f900:· | 0003f900:·7420·5253·5953·4c4f·475f·494e·434c·5544··t·RSYSLOG_INCLUD | ||
| 0003f910:· | 0003f910:·455f·434f·4e46·4947·2026·6c74·3b20·266c··E_CONFIG·<·&l | ||
| 0003f920:· | 0003f920:·743b·2866·6f72·2049·4e43·5041·5448·2069··t;(for·INCPATH·i | ||
| 0003f930:· | 0003f930:·6e20·2224·7b4f·4c44·5f49·4e43·5b40·5d7d··n·"${OLD_INC[@]} | ||
| 0003f940:·2 | 0003f940:·223b·2064·6f20·6576·616c·2070·7269·6e74··";·do·eval·print | ||
| 0003f950:· | 0003f950:·6620·2725·735c·5c6e·2720·2224·7b49·4e43··f·'%s\\n'·"${INC | ||
| 0003f960:· | 0003f960:·5041·5448·7d22·3b20·646f·6e65·290a·7265··PATH}";·done).re | ||
| 0003f970:· | 0003f970:·6164·6172·7261·7920·2d74·204e·4557·5f49··adarray·-t·NEW_I | ||
| 0003f980:· | 0003f980:·4e43·2026·6c74·3b20·266c·743b·2873·6564··NC·<·<(sed | ||
| 0003f990:· | 0003f990:·202d·6e20·272f·5e5c·732a·696e·636c·7564···-n·'/^\s*includ | ||
| 0003f9a0:· | 0003f9a0:·6528·2f2c·2f29·2f49·7027·202f·6574·632f··e(/,/)/Ip'·/etc/ | ||
| 0003f9b0:·2 | 0003f9b0:·7273·7973·6c6f·672e·636f·6e66·207c·2073··rsyslog.conf·|·s | ||
| 0003f9c0:· | 0003f9c0:·6564·202d·6e20·2773·402e·2a66·696c·655c··ed·-n·'s@.*file\ | ||
| 0003f9d0:· | 0003f9d0:·732a·3d5c·732a·225c·285b·2f5b·3a61·6c6e··s*=\s*"\([/[:aln | ||
| 0003f9e0:· | 0003f9e0:·756d·3a5d·5b3a·7075·6e63·743a·5d5d·2a5c··um:][:punct:]]*\ | ||
| 0003f9f0:· | 0003f9f0:·2922·2e2a·405c·3140·4970·2729·0a72·6561··)".*@\1@Ip').rea | ||
| 0003fa00:·6 | 0003fa00:·6461·7272·6179·202d·7420·5253·5953·4c4f··darray·-t·RSYSLO | ||
| 0003fa10:· | 0003fa10:·475f·494e·434c·5544·4520·266c·743b·2026··G_INCLUDE·<·& | ||
| 0003fa20:· | 0003fa20:·6c74·3b28·666f·7220·494e·4350·4154·4820··lt;(for·INCPATH· | ||
| 0003fa30:·696 | 0003fa30:·696e·2022·247b·4e45·575f·494e·435b·405d··in·"${NEW_INC[@] | ||
| 0003fa40:· | 0003fa40:·7d22·3b20·646f·2065·7661·6c20·7072·696e··}";·do·eval·prin | ||
| 0003fa50:· | 0003fa50:·7466·2027·2573·5c5c·6e27·2022·247b·494e··tf·'%s\\n'·"${IN | ||
| 0003fa60:· | 0003fa60:·4350·4154·487d·223b·2064·6f6e·6529·0a0a··CPATH}";·done).. | ||
| 0003fa70:· | 0003fa70:·2320·4465·636c·6172·6520·616e·2061·7272··#·Declare·an·arr | ||
| 0003fa80:· | 0003fa80:·6179·2074·6f20·686f·6c64·2074·6865·2066··ay·to·hold·the·f | ||
| 0003fa90:·6 | 0003fa90:·696e·616c·206c·6973·7420·6f66·2064·6966··inal·list·of·dif | ||
| 0003faa0:·6 | 0003faa0:·6665·7265·6e74·206c·6f67·2066·696c·6520··ferent·log·file· | ||
| 0003fab0:· | 0003fab0:·7061·7468·730a·6465·636c·6172·6520·2d61··paths.declare·-a | ||
| 0003fac0:· | 0003fac0:·204c·4f47·5f46·494c·455f·5041·5448·530a···LOG_FILE_PATHS. | ||
| 0003fad0:· | 0003fad0:·0a23·2041·7272·6179·2074·6f20·686f·6c64··.#·Array·to·hold | ||
| 0003fae0:· | 0003fae0:·2061·6c6c·2072·7379·736c·6f67·2063·6f6e···all·rsyslog·con | ||
| 0003faf0:· | 0003faf0:·6669·6720·656e·7472·6965·730a·5253·5953··fig·entries.RSYS | ||
| 0003fb00:· | 0003fb00:·4c4f·475f·434f·4e46·4947·533d·2829·0a52··LOG_CONFIGS=().R | ||
| 0003fb10:· | 0003fb10:·5359·534c·4f47·5f43·4f4e·4649·4753·3d28··SYSLOG_CONFIGS=( | ||
| 0003fb20:· | 0003fb20:·2224·7b52·5359·534c·4f47·5f45·5443·5f43··"${RSYSLOG_ETC_C | ||
| 0003fb30:· | 0003fb30:·4f4e·4649·477d·2220·2224·7b52·5359·534c··ONFIG}"·"${RSYSL | ||
| 0003fb40:· | 0003fb40:·4f47·5f49·4e43·4c55·4445·5f43·4f4e·4649··OG_INCLUDE_CONFI | ||
| 0003fb50:· | 0003fb50:·475b·405d·7d22·2022·247b·5253·5953·4c4f··G[@]}"·"${RSYSLO | ||
| 0003fb60:· | 0003fb60:·475f·494e·434c·5544·455b·405d·7d22·290a··G_INCLUDE[@]}"). | ||
| 0003fb70:· | 0003fb70:·0a23·2047·6574·2066·756c·6c20·6c69·7374··.#·Get·full·list | ||
| 0003fb80:· | 0003fb80:·206f·6620·6669·6c65·7320·746f·2062·6520···of·files·to·be· | ||
| 0003fb90:·6 | 0003fb90:·6368·6563·6b65·640a·2320·5253·5953·4c4f··checked.#·RSYSLO | ||
| 0003fba0:· | 0003fba0:·475f·434f·4e46·4947·5320·6d61·7920·636f··G_CONFIGS·may·co | ||
| 0003fbb0:· | 0003fbb0:·6e74·6169·6e20·676c·6f62·7320·7375·6368··ntain·globs·such | ||
| 0003fbc0:· | 0003fbc0:·2061·730a·2320·2f65·7463·2f72·7379·736c···as.#·/etc/rsysl | ||
| 0003fbd0:· | 0003fbd0:·6f67·2e64·2f2a·2e63·6f6e·6620·2f65·7463··og.d/*.conf·/etc | ||
| 0003fbe0:· | 0003fbe0:·2f72·7379·736c·6f67·2e64·2f2a·2e66·7275··/rsyslog.d/*.fru | ||
| 0003fbf0:· | 0003fbf0:·6c65·0a23·2053·6f2c·206c·6f6f·7020·6f76··le.#·So,·loop·ov | ||
| 0003fc00:· | 0003fc00:·6572·2074·6865·2065·6e74·7269·6573·2069··er·the·entries·i | ||
| 0003fc10:· | 0003fc10:·6e20·5253·5953·4c4f·475f·434f·4e46·4947··n·RSYSLOG_CONFIG | ||
| 0003fc20:· | 0003fc20:·5320·616e·6420·7573·6520·6669·6e64·2074··S·and·use·find·t | ||
| 0003fc30:· | 0003fc30:·6f20·6765·7420·7468·6520·6c69·7374·206f··o·get·the·list·o | ||
| 0003fc40:· | 0003fc40:·6620·696e·636c·7564·6564·2066·696c·6573··f·included·files | ||
| 0003fc50:· | 0003fc50:·2e0a·5253·5953·4c4f·475f·434f·4e46·4947··..RSYSLOG_CONFIG | ||
| 0003fc60:· | 0003fc60:·5f46·494c·4553·3d28·290a·666f·7220·454e··_FILES=().for·EN | ||
| 0003fc70:· | 0003fc70:·5452·5920·696e·2022·247b·5253·5953·4c4f··TRY·in·"${RSYSLO | ||
| 0003fc80:· | 0003fc80:·475f·434f·4e46·4947·535b·405d·7d22·0a64··G_CONFIGS[@]}".d | ||
| 0003fc90:·6 | 0003fc90:·6f0a·0923·2049·6620·6469·7265·6374·6f72··o..#·If·director | ||
| 0003fca0:· | 0003fca0:·792c·2072·7379·736c·6f67·2077·696c·6c20··y,·rsyslog·will· | ||
| 0003fcb0:·7 | 0003fcb0:·7365·6172·6368·2066·6f72·2063·6f6e·6669··search·for·confi | ||
| 0003fcc0:· | 0003fcc0:·6720·6669·6c65·7320·696e·2072·6563·7572··g·files·in·recur | ||
| 0003fcd0:· | 0003fcd0:·7369·7665·6c79·2e0a·0923·2048·6f77·6576··sively...#·Howev | ||
| 0003fce0:· | 0003fce0:·6572·2c20·6669·6c65·7320·696e·2068·6964··er,·files·in·hid | ||
| 0003fcf0:· | 0003fcf0:·6465·6e20·7375·622d·6469·7265·6374·6f72··den·sub-director | ||
| 0003fd00:·6573 | 0003fd00:·6965·7320·6f72·2068·6964·6465·6e20·6669··ies·or·hidden·fi | ||
| 0003fd10:· | 0003fd10:·6c65·7320·7769·6c6c·2062·6520·6967·6e6f··les·will·be·igno | ||
| Max diff block lines reached; 1047475/1153349 bytes (90.82%) of diff not shown. | |||
| Offset 258, 14 lines modified | Offset 258, 142 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 268 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 269 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 270 | q·'^installed';·then | ||
| 271 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 272 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 273 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 274 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 275 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 276 | of·IncludeConfig) | ||
| 277 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 278 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 279 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 280 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 281 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 282 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 283 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 284 | '%s\\n'·"${INCPATH}";·done) | ||
| 285 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 286 | declare·-a·LOG_FILE_PATHS | ||
| 287 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 288 | RSYSLOG_CONFIGS=() | ||
| 289 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 290 | {RSYSLOG_INCLUDE[@]}") | ||
| 291 | #·Get·full·list·of·files·to·be·checked | ||
| 292 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 293 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 294 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 295 | included·files. | ||
| 296 | RSYSLOG_CONFIG_FILES=() | ||
| 297 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 298 | do | ||
| 299 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 300 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 301 | » if·[·-d·"${ENTRY}"·] | ||
| 302 | » then | ||
| 303 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 305 | » elif·[·-f·"${ENTRY}"·] | ||
| 306 | » then | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 308 | » else | ||
| 309 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 310 | » fi | ||
| 311 | done | ||
| 312 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 313 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 314 | configuration) | ||
| 315 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 316 | do | ||
| 317 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 318 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 319 | ('$')·characters, | ||
| 320 | » #·*·Ignore·empty·lines, | ||
| 321 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 322 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 323 | not·log·files | ||
| 324 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 325 | path | ||
| 326 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 327 | all·of·the | ||
| 328 | » #·following·are·met: | ||
| 329 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 330 | » #·*·it·is·preceded·by·space | ||
| 331 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 332 | characters | ||
| 333 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 334 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 335 | » then | ||
| 336 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 337 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 338 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 339 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 340 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 341 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 342 | {FILTERED_PATHS}") | ||
| 343 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 344 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 345 | newline),·split | ||
| 346 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 347 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 348 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 349 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 350 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 351 | » » #·Delete·the·temporary·array | ||
| 352 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 353 | » fi | ||
| 354 | done | ||
| 355 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 356 | grep·regex·is·a·bit | ||
| 357 | #·curly: | ||
| 358 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 359 | #·extract·File="logfile"·expression | ||
| 360 | #·match·only·"logfile"·expression | ||
| 361 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 362 | do | ||
| 363 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 364 | "${LOG_FILE}") | ||
| 365 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 366 | alnum:][:punct:]]*)\"\s*\)") | ||
| 367 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 368 | ]]*)\""|tr·-d·"\"")") | ||
| 369 | done | ||
| 370 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 371 | FILE_CMD="chgrp" | ||
| 372 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 373 | do | ||
| 374 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 375 | further·processing | ||
| 376 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 377 | » then | ||
| Max diff block lines reached; 133705/139356 bytes (95.94%) of diff not shown. | |||
| Offset 15037, 185 lines modified | Offset 15037, 185 lines modified | ||
| 0003abc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003abc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003abd0:·3d22·2369·646d·3236·3833·2220·7461·6269··="#idm2683"·tabi | 0003abd0:·3d22·2369·646d·3236·3833·2220·7461·6269··="#idm2683"·tabi | ||
| 0003abe0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003abe0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003abf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003abf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ac00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ac00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ac10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ac10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ac20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ac20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ac30:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ac30:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ac40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ac50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ac60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ac70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ac80:·3d22·6964·6d32·3638·3322·3e3c·7461·626c··="idm2683"><tabl | |||
| 0003ac90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aca0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003acb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003acc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003acd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ace0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003acf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a | 0003ac40:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003ac50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ac60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ac70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ac80:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ac90:·3638·3322·3e3c·7072·653e·3c63·6f64·653e··683"><pre><code> | |||
| 0003aca0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003acb0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003acc0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003acd0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ace0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003acf0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ad00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ad10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ad20:·3236·3834·2220·7461·6269·6e64·6578·3d22··2684"·tabindex=" | |||
| 0003ad30:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ad40:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ad50:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ad60:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ad70:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ad80:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ad90:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ada0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003adb0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003adc0:·6c61·7073·6522·2069·643d·2269·646d·3236··lapse"·id="idm26 | |||
| 0003add0:·3834·223e·3c74·6162·6c65·2063·6c61·7373··84"><table·class | |||
| 0003ade0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003adf0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a | 0003ae30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003ae40:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ad20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ad30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ad40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ad50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ad60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ad70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ad80:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ad90:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ada0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003adb0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003adc0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003add0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ade0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003adf0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003ae00:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003ae10:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003ae20:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003ae30:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003ae40:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003ae50:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003ae60:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003ae70:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003ae80:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003ae90:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003aea0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003aeb0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003aec0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003aed0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003aee0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003aef0:·2020·7768·656e·3a20·2722·6c69·6e75·782d····when:·'"linux- | |||
| 0003af00:·6261·7365·2220·696e·2061·6e73·6962·6c65··base"·in·ansible | |||
| 0003af10:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003af20:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003af30:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003af40:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af50:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af60:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003af70:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003af80:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003af90:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003afa0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003afb0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003afc0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003afd0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003afe0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003aff0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b000:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b010:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b020:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b030:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b040:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b050:·6d32·3638·3422·2074·6162·696e·6465·783d··m2684"·tabindex= | |||
| 0003b060:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b070:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b080:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b090:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b0a0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b0b0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b0c0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b0d0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b0e0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b0f0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b100:·6522·2069·643d·2269·646d·3236·3834·223e··e"·id="idm2684"> | |||
| 0003b110:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b120:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b130:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b140:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b150:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b160:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b170:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b180:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b190:·6172·6765·743d·2223·6964·6d32·3638·3522··arget="#idm2685" | |||
| 0003b1a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b1b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| Max diff block lines reached; 17129413/17153591 bytes (99.86%) of diff not shown. | |||
| Offset 15042, 185 lines modified | Offset 15042, 185 lines modified | ||
| 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac20:·743d·2223·6964·6d32·3638·3322·2074·6162··t="#idm2683"·tab | 0003ac20:·743d·2223·6964·6d32·3638·3322·2074·6162··t="#idm2683"·tab | ||
| 0003ac30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ac80:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003ac80:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ac90:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003aca0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ac | 0003ac90:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003aca0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003acb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003acc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003acd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ace0:·3236·3833·223e·3c70·7265·3e3c·636f·6465··2683"><pre><code | |||
| 0003acf0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad00:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad10:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003ad20:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad30:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad40:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ad50:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ad60:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ad70:·6d32·3638·3422·2074·6162·696e·6465·783d··m2684"·tabindex= | |||
| 0003ad80:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ad90:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ada0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003adb0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003adc0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003add0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003ade0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003adf0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a | 0003ae00:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003ae10:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003ae20:·3638·3422·3e3c·7461·626c·6520·636c·6173··684"><table·clas | |||
| 0003ae30:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ae40:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ae50:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ae60:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ae70:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003acd0:·643d·2269·646d·3236·3833·223e·3c74·6162··d="idm2683"><tab | |||
| 0003ace0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003acf0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad00:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad10:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad20:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad30:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad40:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ad50:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a | 0003ae80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003ae90:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003ad70:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ad80:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003ad90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ada0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003adb0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003adc0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003add0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003ade0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003adf0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ae00:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003ae10:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003ae20:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003ae30:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003ae40:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003ae50:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003ae60:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003ae70:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003ae80:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003ae90:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003aea0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003aeb0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003aec0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003aed0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003aee0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003aef0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003af00:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003af10:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003af20:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003af30:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003af40:·0a20·2077·6865·6e3a·2027·226c·696e·7578··.··when:·'"linux | |||
| 0003af50:·2d62·6173·6522·2069·6e20·616e·7369·626c··-base"·in·ansibl | |||
| 0003af60:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003af70:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003af80:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003af90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003afa0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003afb0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003afc0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003afd0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003afe0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003aff0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b000:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b010:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b020:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b030:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b040:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b050:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b060:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b070:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b080:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b090:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b0a0:·646d·3236·3834·2220·7461·6269·6e64·6578··dm2684"·tabindex | |||
| 0003b0b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b0c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b0d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b0e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b0f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b100:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b110:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b120:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b130:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b140:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b150:·7365·2220·6964·3d22·6964·6d32·3638·3422··se"·id="idm2684" | |||
| 0003b160:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b170:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b180:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b190:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b1a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1e0:·7461·7267·6574·3d22·2369·646d·3236·3835··target="#idm2685 | |||
| 0003b1f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b200:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b210:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| Max diff block lines reached; 17322489/17346667 bytes (99.86%) of diff not shown. | |||
| Offset 15028, 185 lines modified | Offset 15028, 185 lines modified | ||
| 0003ab30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ab30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ab40:·2223·6964·6d32·3638·3322·2074·6162·696e··"#idm2683"·tabin | 0003ab40:·2223·6964·6d32·3638·3322·2074·6162·696e··"#idm2683"·tabin | ||
| 0003ab50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ab50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ab60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ab60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ab70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ab70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ab80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ab80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ab90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ab90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aba0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003aba0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003abb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003abc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003abd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003abe0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003abf0:·2269·646d·3236·3833·223e·3c74·6162·6c65··"idm2683"><table | |||
| 0003ac00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ac10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ac20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ac30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ac40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ac50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ac60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a | 0003abb0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003abc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003abd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003abe0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003abf0:·6c61·7073·6522·2069·643d·2269·646d·3236··lapse"·id="idm26 | |||
| 0003ac00:·3833·223e·3c70·7265·3e3c·636f·6465·3e0a··83"><pre><code>. | |||
| 0003ac10:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ac20:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ac30:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ac40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ac50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ac60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ac70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ac80:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003ac90:·3638·3422·2074·6162·696e·6465·783d·2230··684"·tabindex="0 | |||
| 0003aca0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003acb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003acc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003acd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ace0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003acf0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003ad00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ad10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ad20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ad30:·6170·7365·2220·6964·3d22·6964·6d32·3638··apse"·id="idm268 | |||
| 0003ad40:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003ad50:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ad60:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ad70:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ad80:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ad90:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a | 0003ada0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003adb0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ac90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003aca0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003acb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003acc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003acd0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ace0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003acf0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003ad00:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003ad10:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003ad20:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ad30:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003ad40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003ad50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ad60:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ad70:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ad80:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ad90:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ada0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003adb0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003adc0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003add0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003ade0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003adf0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003ae00:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003ae10:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003ae20:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003ae30:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003ae40:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003ae50:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003ae60:·2077·6865·6e3a·2027·226c·696e·7578·2d62···when:·'"linux-b | |||
| 0003ae70:·6173·6522·2069·6e20·616e·7369·626c·655f··ase"·in·ansible_ | |||
| 0003ae80:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003ae90:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003aea0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003aeb0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003aec0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003aed0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003aee0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003aef0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003af00:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003af10:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003af20:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003af30:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003af40:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003af50:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003af60:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003af70:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003af80:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003af90:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003afa0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003afb0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003afc0:·3236·3834·2220·7461·6269·6e64·6578·3d22··2684"·tabindex=" | |||
| 0003afd0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003afe0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003aff0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b000:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b010:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b020:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b030:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b040:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b050:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b060:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b070:·2220·6964·3d22·6964·6d32·3638·3422·3e3c··"·id="idm2684">< | |||
| 0003b080:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b090:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0a0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b0b0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b0c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b0d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b0e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b0f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b100:·7267·6574·3d22·2369·646d·3236·3835·2220··rget="#idm2685"· | |||
| 0003b110:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b120:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| Max diff block lines reached; 6467319/6491497 bytes (99.63%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 45 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | include·install_aide | ||
| 128 | class·install_aide·{ | ||
| 129 | ··package·{·'aide': | ||
| 130 | ····ensure·=>·'installed', | ||
| 131 | ··} | ||
| 132 | } | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 140 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 141 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Gather·the·package·facts | 150 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 151 | ··package_facts: |
| Offset 147, 45 lines modified | Offset 178, 14 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 178 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 180 | ··-·low_complexity |
| 150 | ··-·low_disruption | 181 | ··-·low_disruption |
| 151 | ··-·medium_severity | 182 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 184 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 165 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 166 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_aide | ||
| 176 | class·install_aide·{ | ||
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 186 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·aideinit | 187 | $·sudo·aideinit |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 189 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 190 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 191 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 209, 14 lines modified | Offset 209, 41 lines modified | ||
| 209 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 209 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 210 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 210 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 211 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 211 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 212 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 212 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 213 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 213 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 214 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 214 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 215 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 217 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 218 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 219 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed;·then | ||
| 220 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | ||
| 221 | AIDE_CONFIG=/etc/aide/aide.conf | ||
| 222 | DEFAULT_DB_PATH=/var/lib/aide/aide.db | ||
| 223 | #·Fix·db·path·in·the·config·file,·if·necessary | ||
| 224 | if·!·grep·-q·'^database=file:'·${AIDE_CONFIG};·then | ||
| 225 | ····#·replace_or_append·gets·confused·by·'database=file'·as·a·key,·so·should·not·be·used. | ||
| 226 | ····#replace_or_append·"${AIDE_CONFIG}"·'^database=file'·"${DEFAULT_DB_PATH}"·'@CCENUM@'·'%s:%s' | ||
| 227 | ····echo·"database=file:${DEFAULT_DB_PATH}"·>>·${AIDE_CONFIG} | ||
| 228 | fi | ||
| 229 | #·Fix·db·out·path·in·the·config·file,·if·necessary | ||
| 230 | if·!·grep·-q·'^database_out=file:'·${AIDE_CONFIG};·then | ||
| 231 | ····echo·"database_out=file:${DEFAULT_DB_PATH}.new"·>>·${AIDE_CONFIG} | ||
| 232 | fi | ||
| 233 | /usr/sbin/aideinit·-y·-f | ||
| 234 | else | ||
| 235 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 236 | fi | ||
| 216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 888027/893259 bytes (99.41%) of diff not shown. | |||
| Offset 15543, 417 lines modified | Offset 15543, 417 lines modified | ||
| 0003cb60:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003cb60:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003cb70:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | 0003cb70:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | ||
| 0003cb80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003cb80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003cb90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003cb90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003cba0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003cba0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003cbb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003cbb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (403 lines added, 403 lines removed) | |
| 0003cbc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003cbc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003cbd0:·6961·7469·6f6e·20 | 0003cbd0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003cbe0:·6 | 0003cbe0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003cbf0:· | 0003cbf0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003cc00:· | 0003cc00:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003cc10:· | 0003cc10:·7365·2220·6964·3d22·6964·6d34·3632·3522··se"·id="idm4625" | ||
| 0003cc20:·3 | 0003cc20:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003cc30:· | 0003cc30:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003cc40:· | 0003cc40:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003cc50:·6 | 0003cc50:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003cc60:· | 0003cc60:·730a·6966·2064·706b·672d·7175·6572·7920··s.if·dpkg-query· | ||
| 0003cc70:· | 0003cc70:·2d2d·7368·6f77·202d·2d73·686f·7766·6f72··--show·--showfor | ||
| 0003cc80:·6 | 0003cc80:·6d61·743d·2724·7b64·623a·5374·6174·7573··mat='${db:Status | ||
| 0003cc90:· | 0003cc90:·2d53·7461·7475·737d·5c6e·2720·276c·6962··-Status}\n'·'lib | ||
| 0003cca0:· | 0003cca0:·7061·6d2d·7275·6e74·696d·6527·2032·2667··pam-runtime'·2&g | ||
| 0003ccb0:· | 0003ccb0:·743b·2f64·6576·2f6e·756c·6c20·7c20·6772··t;/dev/null·|·gr | ||
| 0003ccc0:· | 0003ccc0:·6570·202d·7120·275e·696e·7374·616c·6c65··ep·-q·'^installe | ||
| 0003ccd0:· | 0003ccd0:·6427·3b20·7468·656e·0a0a·7661·725f·7061··d';·then..var_pa | ||
| 0003cce0:·7 | 0003cce0:·7373·776f·7264·5f70·616d·5f75·6e69·785f··ssword_pam_unix_ | ||
| 0003ccf0:· | 0003ccf0:·7265·6d65·6d62·6572·3d27·3c61·6262·7220··remember='<abbr· | ||
| 0003cd00:· | 0003cd00:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | ||
| 0003cd10:· | 0003cd10:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | ||
| 0003cd20:· | 0003cd20:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | ||
| 0003cd30:· | 0003cd30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | ||
| 0003cd40:· | 0003cd40:·616c·7565·5f76·6172·5f70·6173·7377·6f72··alue_var_passwor | ||
| 0003cd50:· | 0003cd50:·645f·7061·6d5f·756e·6978·5f72·656d·656d··d_pam_unix_remem | ||
| 0003cd60:· | 0003cd60:·6265·7222·3e32·3c2f·6162·6272·3e27·0a0a··ber">2</abbr>'.. | ||
| 0003cd70:· | 0003cd70:·0a0a·0a0a·0a69·6620·5b20·2d65·2022·2f65··.....if·[·-e·"/e | ||
| 0003cd80:· | 0003cd80:·7463·2f70·616d·2e64·2f63·6f6d·6d6f·6e2d··tc/pam.d/common- | ||
| 0003cd90:· | 0003cd90:·7061·7373·776f·7264·2220·5d20·3b20·7468··password"·]·;·th | ||
| 0003cda0:· | 0003cda0:·656e·0a20·2020·2076·616c·7565·5265·6765··en.····valueRege | ||
| 0003cdb0:· | 0003cdb0:·783d·2224·7661·725f·7061·7373·776f·7264··x="$var_password | ||
| 0003cdc0:· | 0003cdc0:·5f70·616d·5f75·6e69·785f·7265·6d65·6d62··_pam_unix_rememb | ||
| 0003cdd0:· | 0003cdd0:·6572·2220·6465·6661·756c·7456·616c·7565··er"·defaultValue | ||
| 0003cde0:· | 0003cde0:·3d22·2476·6172·5f70·6173·7377·6f72·645f··="$var_password_ | ||
| 0003cdf0:· | 0003cdf0:·7061·6d5f·756e·6978·5f72·656d·656d·6265··pam_unix_remembe | ||
| 0003ce00:· | 0003ce00:·7222·0a20·2020·2023·206e·6f6e·2d65·6d70··r".····#·non-emp | ||
| 0003ce10:· | 0003ce10:·7479·2076·616c·7565·7320·6e65·6564·2074··ty·values·need·t | ||
| 0003ce20:· | 0003ce20:·6f20·6265·2070·7265·6365·6465·6420·6279··o·be·preceded·by | ||
| 0003ce30:·20 | 0003ce30:·2061·6e20·6571·7561·6c73·2073·6967·6e0a···an·equals·sign. | ||
| 0003ce40:· | 0003ce40:·2020·2020·5b20·2d6e·2022·247b·7661·6c75······[·-n·"${valu | ||
| 0003ce50:·6 | 0003ce50:·6552·6567·6578·7d22·205d·2026·616d·703b··eRegex}"·]·& | ||
| 0003ce60:· | 0003ce60:·2661·6d70·3b20·7661·6c75·6552·6567·6578··&·valueRegex | ||
| 0003ce70:· | 0003ce70:·3d22·3d24·7b76·616c·7565·5265·6765·787d··="=${valueRegex} | ||
| 0003ce80:· | 0003ce80:·220a·2020·2020·2320·6164·6420·616e·2065··".····#·add·an·e | ||
| 0003ce90:· | 0003ce90:·7175·616c·7320·7369·676e·2074·6f20·6e6f··quals·sign·to·no | ||
| 0003cea0:· | 0003cea0:·6e2d·656d·7074·7920·7661·6c75·6573·0a20··n-empty·values.· | ||
| 0003ceb0:· | 0003ceb0:·2020·205b·202d·6e20·2224·7b64·6566·6175·····[·-n·"${defau | ||
| 0003cec0:· | 0003cec0:·6c74·5661·6c75·657d·2220·5d20·2661·6d70··ltValue}"·]·& | ||
| 0003ced0:·6 | 0003ced0:·3b26·616d·703b·2064·6566·6175·6c74·5661··;&·defaultVa | ||
| 0003cee0:· | 0003cee0:·6c75·653d·223d·247b·6465·6661·756c·7456··lue="=${defaultV | ||
| 0003cef0:· | 0003cef0:·616c·7565·7d22·0a0a·2020·2020·2320·6669··alue}"..····#·fi | ||
| 0003cf00:· | 0003cf00:·7820·2774·7970·6527·2069·6620·6974·2773··x·'type'·if·it's | ||
| 0003cf10:·20 | 0003cf10:·2077·726f·6e67·0a20·2020·2069·6620·6772···wrong.····if·gr | ||
| 0003cf20:·6 | 0003cf20:·6570·202d·7120·2d50·2022·5e5c·5c73·2a28··ep·-q·-P·"^\\s*( | ||
| 0003cf30:· | 0003cf30:·3f22·2721·2722·7061·7373·776f·7264·5c5c··?"'!'"password\\ | ||
| 0003cf40:· | 0003cf40:·7329·5b5b·3a61·6c6e·756d·3a5d·5d2b·5c5c··s)[[:alnum:]]+\\ | ||
| 0003cf50:· | 0003cf50:·732b·5b5b·3a61·6c6e·756d·3a5d·5d2b·5c5c··s+[[:alnum:]]+\\ | ||
| 0003cf60:· | 0003cf60:·732b·7061·6d5f·756e·6978·2e73·6f22·2026··s+pam_unix.so"·& | ||
| 0003cf70:·6 | 0003cf70:·6c74·3b20·222f·6574·632f·7061·6d2e·642f··lt;·"/etc/pam.d/ | ||
| 0003cf80:· | 0003cf80:·636f·6d6d·6f6e·2d70·6173·7377·6f72·6422··common-password" | ||
| 0003cf90:· | 0003cf90:·203b·2074·6865·6e0a·2020·2020·2020·2020···;·then.········ | ||
| 0003cfa0:· | 0003cfa0:·7365·6420·2d2d·666f·6c6c·6f77·2d73·796d··sed·--follow-sym | ||
| 0003cfb0:·6 | 0003cfb0:·6c69·6e6b·7320·2d69·202d·4520·2d65·2022··links·-i·-E·-e·" | ||
| 0003cfc0:· | 0003cfc0:·732f·5e28·5c5c·732a·295b·5b3a·616c·6e75··s/^(\\s*)[[:alnu | ||
| 0003cfd0:· | 0003cfd0:·6d3a·5d5d·2b28·5c5c·732b·5b5b·3a61·6c6e··m:]]+(\\s+[[:aln | ||
| 0003cfe0:· | 0003cfe0:·756d·3a5d·5d2b·5c5c·732b·7061·6d5f·756e··um:]]+\\s+pam_un | ||
| 0003cff0:·6 | 0003cff0:·6978·2e73·6f29·2f5c·5c31·7061·7373·776f··ix.so)/\\1passwo | ||
| 0003d000:· | 0003d000:·7264·5c5c·322f·2220·222f·6574·632f·7061··rd\\2/"·"/etc/pa | ||
| 0003d010:· | 0003d010:·6d2e·642f·636f·6d6d·6f6e·2d70·6173·7377··m.d/common-passw | ||
| 0003d020:· | 0003d020:·6f72·6422·0a20·2020·2066·690a·0a20·2020··ord".····fi..··· | ||
| 0003d030:· | 0003d030:·2023·2066·6978·2027·636f·6e74·726f·6c27···#·fix·'control' | ||
| 0003d040:· | 0003d040:·2069·6620·6974·2773·2077·726f·6e67·0a20···if·it's·wrong.· | ||
| 0003d050:· | 0003d050:·2020·2069·6620·6772·6570·202d·7120·2d50·····if·grep·-q·-P | ||
| 0003d060:· | 0003d060:·2022·5e5c·5c73·2a70·6173·7377·6f72·645c···"^\\s*password\ | ||
| 0003d070:·5c73·2b | 0003d070:·5c73·2b28·3f22·2721·2722·5c5b·7375·6363··\s+(?"'!'"\[succ | ||
| 0003d080:· | 0003d080:·6573·733d·5b5b·3a61·6c6e·756d·3a5d·5d2e··ess=[[:alnum:]]. | ||
| 0003d090:· | 0003d090:·2a5c·5d29·5b5b·3a61·6c6e·756d·3a5d·5d2b··*\])[[:alnum:]]+ | ||
| 0003d0a0:· | 0003d0a0:·5c5c·732b·7061·6d5f·756e·6978·2e73·6f22··\\s+pam_unix.so" | ||
| 0003d0b0:· | 0003d0b0:·2026·6c74·3b20·222f·6574·632f·7061·6d2e···<·"/etc/pam. | ||
| 0003d0c0:·6 | 0003d0c0:·642f·636f·6d6d·6f6e·2d70·6173·7377·6f72··d/common-passwor | ||
| 0003d0d0:· | 0003d0d0:·6422·203b·2074·6865·6e0a·2020·2020·2020··d"·;·then.······ | ||
| 0003d0e0:·20 | 0003d0e0:·2020·7365·6420·2d2d·666f·6c6c·6f77·2d73····sed·--follow-s | ||
| 0003d0f0:·7 | 0003d0f0:·796d·6c69·6e6b·7320·2d69·202d·4520·2d65··ymlinks·-i·-E·-e | ||
| 0003d100:· | 0003d100:·2022·732f·5e28·5c5c·732a·7061·7373·776f···"s/^(\\s*passwo | ||
| 0003d110:·7 | 0003d110:·7264·5c5c·732b·295b·5b3a·616c·6e75·6d3a··rd\\s+)[[:alnum: | ||
| 0003d120:· | 0003d120:·5d5d·2b28·5c5c·732b·7061·6d5f·756e·6978··]]+(\\s+pam_unix | ||
| 0003d130:· | 0003d130:·2e73·6f29·2f5c·5c31·5c5b·7375·6363·6573··.so)/\\1\[succes | ||
| 0003d140:· | 0003d140:·733d·5b5b·3a61·6c6e·756d·3a5d·5d2e·2a5c··s=[[:alnum:]].*\ | ||
| 0003d150:· | 0003d150:·5d5c·5c32·2f22·2022·2f65·7463·2f70·616d··]\\2/"·"/etc/pam | ||
| 0003d160:· | 0003d160:·2e64·2f63·6f6d·6d6f·6e2d·7061·7373·776f··.d/common-passwo | ||
| 0003d170:·2 | 0003d170:·7264·220a·2020·2020·6669·0a0a·2020·2020··rd".····fi..···· | ||
| 0003d180:· | 0003d180:·2320·6669·7820·7468·6520·7661·6c75·6520··#·fix·the·value· | ||
| 0003d190:· | 0003d190:·666f·7220·276f·7074·696f·6e27·2069·6620··for·'option'·if· | ||
| 0003d1a0:· | 0003d1a0:·6f6e·6520·6578·6973·7473·2062·7574·2064··one·exists·but·d | ||
| 0003d1b0:· | 0003d1b0:·6f65·7320·6e6f·7420·6d61·7463·6820·2776··oes·not·match·'v | ||
| 0003d1c0:· | 0003d1c0:·616c·7565·5265·6765·7827·0a20·2020·2069··alueRegex'.····i | ||
| 0003d1d0:· | 0003d1d0:·6620·6772·6570·202d·7120·2d50·2022·5e5c··f·grep·-q·-P·"^\ | ||
| 0003d1e0:· | 0003d1e0:·5c73·2a70·6173·7377·6f72·645c·5c73·2b5c··\s*password\\s+\ | ||
| 0003d1f0:· | 0003d1f0:·5b73·7563·6365·7373·3d5b·5b3a·616c·6e75··[success=[[:alnu | ||
| 0003d200:· | 0003d200:·6d3a·5d5d·2e2a·5c5d·5c5c·732b·7061·6d5f··m:]].*\]\\s+pam_ | ||
| 0003d210:·7 | 0003d210:·756e·6978·2e73·6f28·5c5c·732e·2b29·3f5c··unix.so(\\s.+)?\ | ||
| 0003d220:· | 0003d220:·5c73·2b72·656d·656d·6265·7228·3f22·2721··\s+remember(?"'! | ||
| 0003d230:· | 0003d230:·2722·247b·7661·6c75·6552·6567·6578·7d28··'"${valueRegex}( | ||
| 0003d240:· | 0003d240:·5c5c·737c·5c24·2929·2220·266c·743b·2022··\\s|\$))"·<·" | ||
| 0003d250:· | 0003d250:·2f65·7463·2f70·616d·2e64·2f63·6f6d·6d6f··/etc/pam.d/commo | ||
| 0003d260:·6 | 0003d260:·6e2d·7061·7373·776f·7264·2220·3b20·7468··n-password"·;·th | ||
| 0003d270:· | 0003d270:·656e·0a20·2020·2020·2020·2073·6564·202d··en.········sed·- | ||
| 0003d280:· | 0003d280:·2d66·6f6c·6c6f·772d·7379·6d6c·696e·6b73··-follow-symlinks | ||
| 0003d290:· | 0003d290:·202d·6920·2d45·202d·6520·2273·2f5e·285c···-i·-E·-e·"s/^(\ | ||
| 0003d2a0:· | 0003d2a0:·5c73·2a70·6173·7377·6f72·645c·5c73·2b5c··\s*password\\s+\ | ||
| 0003d2b0:· | 0003d2b0:·5b73·7563·6365·7373·3d5b·5b3a·616c·6e75··[success=[[:alnu | ||
| 0003d2c0:· | 0003d2c0:·6d3a·5d5d·2e2a·5c5d·5c5c·732b·7061·6d5f··m:]].*\]\\s+pam_ | ||
| 0003d2d0:·6978·2e73·6f2 | 0003d2d0:·756e·6978·2e73·6f28·5c5c·732e·2b29·3f5c··unix.so(\\s.+)?\ | ||
| 0003d2e0:· | 0003d2e0:·5c73·2972·656d·656d·6265·723d·5b5e·5b3a··\s)remember=[^[: | ||
| 0003d2f0:· | 0003d2f0:·7370·6163·653a·5d5d·2a2f·5c5c·3172·656d··space:]]*/\\1rem | ||
| 0003d300:· | 0003d300:·656d·6265·7224·7b64·6566·6175·6c74·5661··ember${defaultVa | ||
| 0003d310:· | 0003d310:·6c75·657d·2f22·2022·2f65·7463·2f70·616d··lue}/"·"/etc/pam | ||
| 0003d320:· | 0003d320:·2e64·2f63·6f6d·6d6f·6e2d·7061·7373·776f··.d/common-passwo | ||
| 0003d330:· | 0003d330:·7264·220a·0a20·2020·2023·2061·6464·2027··rd"..····#·add·' | ||
| Max diff block lines reached; 535780/591974 bytes (90.51%) of diff not shown. | |||
| Offset 177, 14 lines modified | Offset 177, 76 lines modified | ||
| 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 177 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) | 178 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(f),·IA-5(1)(e) |
| 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 179 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 | 180 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.5 |
| 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 | 181 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000077-GPOS-00045 |
| 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 | 182 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R31 |
| 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7,·8.3 | 183 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.7,·8.3 |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 186 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 187 | grep·-q·'^installed';·then | ||
| 188 | var_password_pam_unix_remember='2' | ||
| 189 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 190 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 191 | defaultValue="$var_password_pam_unix_remember" | ||
| 192 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 193 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 194 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 195 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 196 | ····#·fix·'type'·if·it's·wrong | ||
| 197 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 198 | etc/pam.d/common-password"·;·then | ||
| 199 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 200 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 201 | ····fi | ||
| 202 | ····#·fix·'control'·if·it's·wrong | ||
| 203 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 204 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 205 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 206 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 207 | ····fi | ||
| 208 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 209 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 210 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 211 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 212 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 213 | pam.d/common-password" | ||
| 214 | ····#·add·'option=default'·if·option·is·not·set | ||
| 215 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 216 | pam.d/common-password"·&& | ||
| 217 | ············grep····-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| 218 | pam.d/common-password"·|·grep·-q·-E·-v·"\\sremember(=|\\s|\$)"·;·then | ||
| 219 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 220 | ]].*\]\\s+pam_unix.so[^\\n]*)/\\1·remember${defaultValue}/"·"/etc/pam.d/common-password" | ||
| 221 | ····#·add·a·new·entry·if·none·exists | ||
| 222 | ····elif·!·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 223 | (\\s.+)?\\s+remember${valueRegex}(\\s|\$)"·<·"/etc/pam.d/common-password"·;·then | ||
| 224 | ········echo·"password·\[success=[[:alnum:]].*\]·pam_unix.so·remember${defaultValue}"·>>·"/ | ||
| 225 | etc/pam.d/common-password" | ||
| 226 | ····fi | ||
| 227 | else | ||
| 228 | ····echo·"/etc/pam.d/common-password·doesn't·exist"·>&2 | ||
| 229 | fi | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 189 | -·name:·Gather·the·package·facts | 238 | -·name:·Gather·the·package·facts |
| 190 | ··package_facts: | 239 | ··package_facts: |
| Offset 283, 76 lines modified | Offset 345, 14 lines modified | ||
| 283 | ··-·PCI-DSSv4-8.3.7 | 345 | ··-·PCI-DSSv4-8.3.7 |
| 284 | ··-·accounts_password_pam_unix_remember | 346 | ··-·accounts_password_pam_unix_remember |
| 285 | ··-·configure_strategy | 347 | ··-·configure_strategy |
| 286 | ··-·low_complexity | 348 | ··-·low_complexity |
| 287 | ··-·medium_disruption | 349 | ··-·medium_disruption |
| 288 | ··-·medium_severity | 350 | ··-·medium_severity |
| 289 | ··-·no_reboot_needed | 351 | ··-·no_reboot_needed |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·| | ||
| 293 | grep·-q·'^installed';·then | ||
| 294 | var_password_pam_unix_remember='2' | ||
| 295 | if·[·-e·"/etc/pam.d/common-password"·]·;·then | ||
| 296 | ····valueRegex="$var_password_pam_unix_remember" | ||
| 297 | defaultValue="$var_password_pam_unix_remember" | ||
| 298 | ····#·non-empty·values·need·to·be·preceded·by·an·equals·sign | ||
| 299 | ····[·-n·"${valueRegex}"·]·&&·valueRegex="=${valueRegex}" | ||
| 300 | ····#·add·an·equals·sign·to·non-empty·values | ||
| 301 | ····[·-n·"${defaultValue}"·]·&&·defaultValue="=${defaultValue}" | ||
| 302 | ····#·fix·'type'·if·it's·wrong | ||
| 303 | ····if·grep·-q·-P·"^\\s*(?"'!'"password\\s)[[:alnum:]]+\\s+[[:alnum:]]+\\s+pam_unix.so"·<·"/ | ||
| 304 | etc/pam.d/common-password"·;·then | ||
| 305 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*)[[:alnum:]]+(\\s+[[:alnum: | ||
| 306 | ]]+\\s+pam_unix.so)/\\1password\\2/"·"/etc/pam.d/common-password" | ||
| 307 | ····fi | ||
| 308 | ····#·fix·'control'·if·it's·wrong | ||
| 309 | ····if·grep·-q·-P·"^\\s*password\\s+(?"'!'"\[success=[[:alnum:]].*\])[[:alnum: | ||
| 310 | ]]+\\s+pam_unix.so"·<·"/etc/pam.d/common-password"·;·then | ||
| 311 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+)[[:alnum:]]+(\\s+pam_unix.so)/ | ||
| 312 | \\1\[success=[[:alnum:]].*\]\\2/"·"/etc/pam.d/common-password" | ||
| 313 | ····fi | ||
| 314 | ····#·fix·the·value·for·'option'·if·one·exists·but·does·not·match·'valueRegex' | ||
| 315 | ····if·grep·-q·-P·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so | ||
| 316 | (\\s.+)?\\s+remember(?"'!'"${valueRegex}(\\s|\$))"·<·"/etc/pam.d/common-password"·;·then | ||
| 317 | ········sed·--follow-symlinks·-i·-E·-e·"s/^(\\s*password\\s+\[success=[[:alnum: | ||
| 318 | ]].*\]\\s+pam_unix.so(\\s.+)?\\s)remember=[^[:space:]]*/\\1remember${defaultValue}/"·"/etc/ | ||
| 319 | pam.d/common-password" | ||
| 320 | ····#·add·'option=default'·if·option·is·not·set | ||
| 321 | ····elif·grep·-q·-E·"^\\s*password\\s+\[success=[[:alnum:]].*\]\\s+pam_unix.so"·<·"/etc/ | ||
| Max diff block lines reached; 88929/95552 bytes (93.07%) of diff not shown. | |||
| Offset 15996, 146 lines modified | Offset 15996, 146 lines modified | ||
| 0003e7b0:·6765·743d·2223·6964·6d34·3033·3122·2074··get="#idm4031"·t | 0003e7b0:·6765·743d·2223·6964·6d34·3033·3122·2074··get="#idm4031"·t | ||
| 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003e7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003e7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003e7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003e7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003e800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003e810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003e820:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003e830:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e840:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e850:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e860:·3d22·6964·6d34·3033·3122·3e3c·7461·626c··="idm4031"><tabl | |||
| 0003e870:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e880:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e890:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e8a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e8b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e8c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e8d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e8e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e8f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e900:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e910:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e920:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e930:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e940:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003e950:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003e960:·636f·6465·3e0a·666f·7220·6620·696e·202f··code>.for·f·in·/ | |||
| 0003e970:·6574·632f·7375·646f·6572·7320·2f65·7463··etc/sudoers·/etc | |||
| 0003e980:·2f73·7564·6f65·7273·2e64·2f2a·203b·2064··/sudoers.d/*·;·d | |||
| 0003e990:·6f0a·2020·6966·205b·2021·202d·6520·2224··o.··if·[·!·-e·"$ | |||
| 0003e9a0:·6622·205d·203b·2074·6865·6e0a·2020·2020··f"·]·;·then.···· | |||
| 0003e9b0:·636f·6e74·696e·7565·0a20·2066·690a·2020··continue.··fi.·· | |||
| 0003e9c0:·6d61·7463·6869·6e67·5f6c·6973·743d·2428··matching_list=$( | |||
| 0003e9d0:·6772·6570·202d·5020·275e·283f·2123·292e··grep·-P·'^(?!#). | |||
| 0003e9e0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003e9f0:·6361·7465·2e2a·2427·2024·6620·7c20·756e··cate.*$'·$f·|·un | |||
| 0003ea00:·6971·2029·0a20·2069·6620·2120·7465·7374··iq·).··if·!·test | |||
| 0003ea10:·202d·7a20·2224·6d61·7463·6869·6e67·5f6c···-z·"$matching_l | |||
| 0003ea20:·6973·7422·3b20·7468·656e·0a20·2020·2077··ist";·then.····w | |||
| 0003ea30:·6869·6c65·2049·4653·3d20·7265·6164·202d··hile·IFS=·read·- | |||
| 0003ea40:·7220·656e·7472·793b·2064·6f0a·2020·2020··r·entry;·do.···· | |||
| 0003ea50:·2020·2320·636f·6d6d·656e·7420·6f75·7420····#·comment·out· | |||
| 0003ea60:·2221·6175·7468·656e·7469·6361·7465·2220··"!authenticate"· | |||
| 0003ea70:·6d61·7463·6865·7320·746f·2070·7265·7365··matches·to·prese | |||
| 0003ea80:·7276·6520·7573·6572·2064·6174·610a·2020··rve·user·data.·· | |||
| 0003ea90:·2020·2020·7365·6420·2d69·2022·732f·5e24······sed·-i·"s/^$ | |||
| 0003eaa0:·7b65·6e74·7279·7d24·2f23·2026·616d·703b··{entry}$/#·& | |||
| 0003eab0:·2f67·2220·2466·0a20·2020·2064·6f6e·6520··/g"·$f.····done· | |||
| 0003eac0:·266c·743b·266c·743b·266c·743b·2022·246d··<<<·"$m | |||
| 0003ead0:·6174·6368·696e·675f·6c69·7374·220a·0a20··atching_list"..· | |||
| 0003eae0:·2020·202f·7573·722f·7362·696e·2f76·6973·····/usr/sbin/vis | |||
| 0003eaf0:·7564·6f20·2d63·6620·2466·2026·616d·703b··udo·-cf·$f·& | |||
| 0003eb00:·2667·743b·202f·6465·762f·6e75·6c6c·207c··>·/dev/null·| | |||
| 0003eb10:·7c20·6563·686f·2022·4661·696c·2074·6f20··|·echo·"Fail·to· | |||
| 0003eb20:·7661·6c69·6461·7465·2024·6620·7769·7468··validate·$f·with | |||
| 0003eb30:·2076·6973·7564·6f22·0a20·2066·690a·646f···visudo".··fi.do | |||
| 0003eb40:·6e65·0a3c·2f63·6f64·653e·3c2f·7072·653e··ne.</code></pre> | |||
| 0003eb50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003eb60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003eb70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003eb80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003eb90:·6765·743d·2223·6964·6d34·3033·3222·2074··get="#idm4032"·t | |||
| 0003eba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ebb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ebc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ebd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ebe0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ebf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e | 0003ec00:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003e | 0003ec10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003e | 0003ec20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003e | 0003ec30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003e | 0003ec40:·2069·643d·2269·646d·3430·3332·223e·3c74···id="idm4032"><t | ||
| 0003e | 0003ec50:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003e | 0003ec60:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003e | 0003ec70:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003e | 0003ec80:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003e8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003e8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003e8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003e8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003e910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003e920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003e940:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003e950:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e960:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003e970:·4669·6e64·202f·6574·632f·7375·646f·6572··Find·/etc/sudoer | |||
| 0003e980:·732e·642f·2066·696c·6573·0a20·2061·6e73··s.d/·files.··ans | |||
| 0003e990:·6962·6c65·2e62·7569·6c74·696e·2e66·696e··ible.builtin.fin | |||
| 0003e9a0:·643a·0a20·2020·2070·6174·6873·3a0a·2020··d:.····paths:.·· | |||
| 0003e9b0:·2020·2d20·2f65·7463·2f73·7564·6f65·7273····-·/etc/sudoers | |||
| 0003e9c0:·2e64·2f0a·2020·7265·6769·7374·6572·3a20··.d/.··register:· | |||
| 0003e9d0:·7375·646f·6572·730a·2020·7461·6773·3a0a··sudoers.··tags:. | |||
| 0003e9e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003e9f0:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003ea00:·2d38·3030·2d35·332d·4941·2d31·310a·2020··-800-53-IA-11.·· | |||
| 0003ea10:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ea20:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ea30:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ea40:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ea50:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ea60:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ea70:·6779·0a20·202d·2073·7564·6f5f·7265·6d6f··gy.··-·sudo_remo | |||
| 0003ea80:·7665·5f6e·6f5f·6175·7468·656e·7469·6361··ve_no_authentica | |||
| 0003ea90:·7465·0a0a·2d20·6e61·6d65·3a20·5265·6d6f··te..-·name:·Remo | |||
| 0003eaa0:·7665·206c·696e·6573·2063·6f6e·7461·696e··ve·lines·contain | |||
| 0003eab0:·696e·6720·2161·7574·6865·6e74·6963·6174··ing·!authenticat | |||
| 0003eac0:·6520·6672·6f6d·2073·7564·6f65·7273·2066··e·from·sudoers·f | |||
| 0003ead0:·696c·6573·0a20·2061·6e73·6962·6c65·2e62··iles.··ansible.b | |||
| 0003eae0:·7569·6c74·696e·2e72·6570·6c61·6365·3a0a··uiltin.replace:. | |||
| 0003eaf0:·2020·2020·7265·6765·7870·3a20·285e·283f······regexp:·(^(? | |||
| 0003eb00:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb10:·656e·7469·6361·7465·2e2a·2429·0a20·2020··enticate.*$).··· | |||
| 0003eb20:·2072·6570·6c61·6365·3a20·2723·205c·6726···replace:·'#·\g& | |||
| 0003eb30:·6c74·3b31·2667·743b·270a·2020·2020·7061··lt;1>'.····pa | |||
| 0003eb40:·7468·3a20·277b·7b20·6974·656d·2e70·6174··th:·'{{·item.pat | |||
| 0003eb50:·6820·7d7d·270a·2020·2020·7661·6c69·6461··h·}}'.····valida | |||
| 0003eb60:·7465·3a20·2f75·7372·2f73·6269·6e2f·7669··te:·/usr/sbin/vi | |||
| 0003eb70:·7375·646f·202d·6366·2025·730a·2020·7769··sudo·-cf·%s.··wi | |||
| 0003eb80:·7468·5f69·7465·6d73·3a0a·2020·2d20·7061··th_items:.··-·pa | |||
| 0003eb90:·7468·3a20·2f65·7463·2f73·7564·6f65·7273··th:·/etc/sudoers | |||
| 0003eba0:·0a20·202d·2027·7b7b·2073·7564·6f65·7273··.··-·'{{·sudoers | |||
| 0003ebb0:·2e66·696c·6573·207d·7d27·0a20·2074·6167··.files·}}'.··tag | |||
| Max diff block lines reached; 1103380/1122176 bytes (98.33%) of diff not shown. | |||
| Offset 227, 14 lines modified | Offset 227, 35 lines modified | ||
| 227 | ···························1.7,·SR·1.8,·SR·1.9 | 227 | ···························1.7,·SR·1.8,·SR·1.9 |
| 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 228 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 229 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 233 | ···························SRG-OS-000373-GPOS-00158 | 233 | ···························SRG-OS-000373-GPOS-00158 |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 239 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 240 | ··if·[·!·-e·"$f"·]·;·then | ||
| 241 | ····continue | ||
| 242 | ··fi | ||
| 243 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 244 | ··if·!·test·-z·"$matching_list";·then | ||
| 245 | ····while·IFS=·read·-r·entry;·do | ||
| 246 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 247 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 248 | ····done·<<<·"$matching_list" | ||
| 249 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 250 | visudo" | ||
| 251 | ··fi | ||
| 252 | done | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 253 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 254 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 255 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 256 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 257 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Find·/etc/sudoers.d/·files | 258 | -·name:·Find·/etc/sudoers.d/·files |
| 240 | ··ansible.builtin.find: | 259 | ··ansible.builtin.find: |
| Offset 265, 35 lines modified | Offset 286, 14 lines modified | ||
| 265 | ··-·NIST-800-53-IA-11 | 286 | ··-·NIST-800-53-IA-11 |
| 266 | ··-·low_complexity | 287 | ··-·low_complexity |
| 267 | ··-·low_disruption | 288 | ··-·low_disruption |
| 268 | ··-·medium_severity | 289 | ··-·medium_severity |
| 269 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 270 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 271 | ··-·sudo_remove_no_authenticate | 292 | ··-·sudo_remove_no_authenticate |
| 272 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 273 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 274 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 275 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 276 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 277 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 278 | ··if·[·!·-e·"$f"·]·;·then | ||
| 279 | ····continue | ||
| 280 | ··fi | ||
| 281 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 282 | ··if·!·test·-z·"$matching_list";·then | ||
| 283 | ····while·IFS=·read·-r·entry;·do | ||
| 284 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 285 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 286 | ····done·<<<·"$matching_list" | ||
| 287 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 288 | visudo" | ||
| 289 | ··fi | ||
| 290 | done | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 292 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 293 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 294 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 295 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 296 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 297 | ············Without·re-authentication,·users·may·access·resources·or·perform | 299 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 314, 14 lines modified | Offset 314, 35 lines modified | ||
| 314 | ···························1.7,·SR·1.8,·SR·1.9 | 314 | ···························1.7,·SR·1.8,·SR·1.9 |
| 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 315 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 316 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 317 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 318 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 320 | ···························SRG-OS-000373-GPOS-00158 | 320 | ···························SRG-OS-000373-GPOS-00158 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 327 | ··if·[·!·-e·"$f"·]·;·then | ||
| 328 | ····continue | ||
| 329 | ··fi | ||
| 330 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 331 | ··if·!·test·-z·"$matching_list";·then | ||
| 332 | ····while·IFS=·read·-r·entry;·do | ||
| 333 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 334 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 335 | ····done·<<<·"$matching_list" | ||
| 336 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 337 | visudo" | ||
| 338 | ··fi | ||
| 339 | done | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 340 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 341 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 342 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 343 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 344 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Find·/etc/sudoers.d/·files | 345 | -·name:·Find·/etc/sudoers.d/·files |
| 327 | ··ansible.builtin.find: | 346 | ··ansible.builtin.find: |
| Offset 352, 35 lines modified | Offset 373, 14 lines modified | ||
| 352 | ··-·NIST-800-53-IA-11 | 373 | ··-·NIST-800-53-IA-11 |
| 353 | ··-·low_complexity | 374 | ··-·low_complexity |
| 354 | ··-·low_disruption | 375 | ··-·low_disruption |
| 355 | ··-·medium_severity | 376 | ··-·medium_severity |
| 356 | ··-·no_reboot_needed | 377 | ··-·no_reboot_needed |
| 357 | ··-·restrict_strategy | 378 | ··-·restrict_strategy |
| 358 | ··-·sudo_remove_nopasswd | 379 | ··-·sudo_remove_nopasswd |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 364 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 365 | ··if·[·!·-e·"$f"·]·;·then | ||
| 366 | ····continue | ||
| 367 | ··fi | ||
| 368 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 369 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 131317/136765 bytes (96.02%) of diff not shown. | |||
| Offset 16016, 146 lines modified | Offset 16016, 146 lines modified | ||
| 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | 0003e8f0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | ||
| 0003e900:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003e900:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003e910:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003e920:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003e930:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003e940:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003e950:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003e960:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003e970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003e980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003e990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003e9a0:·2220·6964·3d22·6964·6d34·3033·3122·3e3c··"·id="idm4031">< | |||
| 0003e9b0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003e9c0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003e9d0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003e9e0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003e9f0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ea00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ea10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003ea30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ea40:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003ea50:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ea60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ea70:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ea80:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 0003ea90:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003eaa0:·7265·3e3c·636f·6465·3e0a·666f·7220·6620··re><code>.for·f· | |||
| 0003eab0:·696e·202f·6574·632f·7375·646f·6572·7320··in·/etc/sudoers· | |||
| 0003eac0:·2f65·7463·2f73·7564·6f65·7273·2e64·2f2a··/etc/sudoers.d/* | |||
| 0003ead0:·203b·2064·6f0a·2020·6966·205b·2021·202d···;·do.··if·[·!·- | |||
| 0003eae0:·6520·2224·6622·205d·203b·2074·6865·6e0a··e·"$f"·]·;·then. | |||
| 0003eaf0:·2020·2020·636f·6e74·696e·7565·0a20·2066······continue.··f | |||
| 0003eb00:·690a·2020·6d61·7463·6869·6e67·5f6c·6973··i.··matching_lis | |||
| 0003eb10:·743d·2428·6772·6570·202d·5020·275e·283f··t=$(grep·-P·'^(? | |||
| 0003eb20:·2123·292e·2a5b·5c73·5d2b·5c21·6175·7468··!#).*[\s]+\!auth | |||
| 0003eb30:·656e·7469·6361·7465·2e2a·2427·2024·6620··enticate.*$'·$f· | |||
| 0003eb40:·7c20·756e·6971·2029·0a20·2069·6620·2120··|·uniq·).··if·!· | |||
| 0003eb50:·7465·7374·202d·7a20·2224·6d61·7463·6869··test·-z·"$matchi | |||
| 0003eb60:·6e67·5f6c·6973·7422·3b20·7468·656e·0a20··ng_list";·then.· | |||
| 0003eb70:·2020·2077·6869·6c65·2049·4653·3d20·7265·····while·IFS=·re | |||
| 0003eb80:·6164·202d·7220·656e·7472·793b·2064·6f0a··ad·-r·entry;·do. | |||
| 0003eb90:·2020·2020·2020·2320·636f·6d6d·656e·7420········#·comment· | |||
| 0003eba0:·6f75·7420·2221·6175·7468·656e·7469·6361··out·"!authentica | |||
| 0003ebb0:·7465·2220·6d61·7463·6865·7320·746f·2070··te"·matches·to·p | |||
| 0003ebc0:·7265·7365·7276·6520·7573·6572·2064·6174··reserve·user·dat | |||
| 0003ebd0:·610a·2020·2020·2020·7365·6420·2d69·2022··a.······sed·-i·" | |||
| 0003ebe0:·732f·5e24·7b65·6e74·7279·7d24·2f23·2026··s/^${entry}$/#·& | |||
| 0003ebf0:·616d·703b·2f67·2220·2466·0a20·2020·2064··amp;/g"·$f.····d | |||
| 0003ec00:·6f6e·6520·266c·743b·266c·743b·266c·743b··one·<<< | |||
| 0003ec10:·2022·246d·6174·6368·696e·675f·6c69·7374···"$matching_list | |||
| 0003ec20:·220a·0a20·2020·202f·7573·722f·7362·696e··"..····/usr/sbin | |||
| 0003ec30:·2f76·6973·7564·6f20·2d63·6620·2466·2026··/visudo·-cf·$f·& | |||
| 0003ec40:·616d·703b·2667·743b·202f·6465·762f·6e75··amp;>·/dev/nu | |||
| 0003ec50:·6c6c·207c·7c20·6563·686f·2022·4661·696c··ll·||·echo·"Fail | |||
| 0003ec60:·2074·6f20·7661·6c69·6461·7465·2024·6620···to·validate·$f· | |||
| 0003ec70:·7769·7468·2076·6973·7564·6f22·0a20·2066··with·visudo".··f | |||
| 0003ec80:·690a·646f·6e65·0a3c·2f63·6f64·653e·3c2f··i.done.</code></ | |||
| 0003ec90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003eca0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ecb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ecc0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ecd0:·2d74·6172·6765·743d·2223·6964·6d34·3033··-target="#idm403 | |||
| 0003ece0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003ecf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ed00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ed10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ed20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ed30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003e | 0003ed40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003e | 0003ed50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003e | 0003ed60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003e | 0003ed70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003e | 0003ed80:·7073·6522·2069·643d·2269·646d·3430·3332··pse"·id="idm4032 | ||
| 0003e | 0003ed90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003e9c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003e9d0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003e9e0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003e9f0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ea00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ea10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ea20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ea30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ea40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003ea50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ea60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ea70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ea80:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003ea90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003eaa0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003eab0:·6d65·3a20·4669·6e64·202f·6574·632f·7375··me:·Find·/etc/su | |||
| 0003eac0:·646f·6572·732e·642f·2066·696c·6573·0a20··doers.d/·files.· | |||
| 0003ead0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | |||
| 0003eae0:·2e66·696e·643a·0a20·2020·2070·6174·6873··.find:.····paths | |||
| 0003eaf0:·3a0a·2020·2020·2d20·2f65·7463·2f73·7564··:.····-·/etc/sud | |||
| 0003eb00:·6f65·7273·2e64·2f0a·2020·7265·6769·7374··oers.d/.··regist | |||
| 0003eb10:·6572·3a20·7375·646f·6572·730a·2020·7461··er:·sudoers.··ta | |||
| 0003eb20:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0003eb30:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003eb40:·4e49·5354·2d38·3030·2d35·332d·4941·2d31··NIST-800-53-IA-1 | |||
| 0003eb50:·310a·2020·2d20·6c6f·775f·636f·6d70·6c65··1.··-·low_comple | |||
| 0003eb60:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003eb70:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003eb80:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003eb90:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003eba0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | |||
| 0003ebb0:·7261·7465·6779·0a20·202d·2073·7564·6f5f··rategy.··-·sudo_ | |||
| 0003ebc0:·7265·6d6f·7665·5f6e·6f5f·6175·7468·656e··remove_no_authen | |||
| 0003ebd0:·7469·6361·7465·0a0a·2d20·6e61·6d65·3a20··ticate..-·name:· | |||
| 0003ebe0:·5265·6d6f·7665·206c·696e·6573·2063·6f6e··Remove·lines·con | |||
| 0003ebf0:·7461·696e·696e·6720·2161·7574·6865·6e74··taining·!authent | |||
| 0003ec00:·6963·6174·6520·6672·6f6d·2073·7564·6f65··icate·from·sudoe | |||
| 0003ec10:·7273·2066·696c·6573·0a20·2061·6e73·6962··rs·files.··ansib | |||
| 0003ec20:·6c65·2e62·7569·6c74·696e·2e72·6570·6c61··le.builtin.repla | |||
| 0003ec30:·6365·3a0a·2020·2020·7265·6765·7870·3a20··ce:.····regexp:· | |||
| 0003ec40:·285e·283f·2123·292e·2a5b·5c73·5d2b·5c21··(^(?!#).*[\s]+\! | |||
| 0003ec50:·6175·7468·656e·7469·6361·7465·2e2a·2429··authenticate.*$) | |||
| 0003ec60:·0a20·2020·2072·6570·6c61·6365·3a20·2723··.····replace:·'# | |||
| 0003ec70:·205c·6726·6c74·3b31·2667·743b·270a·2020···\g<1>'.·· | |||
| 0003ec80:·2020·7061·7468·3a20·277b·7b20·6974·656d····path:·'{{·item | |||
| 0003ec90:·2e70·6174·6820·7d7d·270a·2020·2020·7661··.path·}}'.····va | |||
| 0003eca0:·6c69·6461·7465·3a20·2f75·7372·2f73·6269··lidate:·/usr/sbi | |||
| 0003ecb0:·6e2f·7669·7375·646f·202d·6366·2025·730a··n/visudo·-cf·%s. | |||
| 0003ecc0:·2020·7769·7468·5f69·7465·6d73·3a0a·2020····with_items:.·· | |||
| 0003ecd0:·2d20·7061·7468·3a20·2f65·7463·2f73·7564··-·path:·/etc/sud | |||
| 0003ece0:·6f65·7273·0a20·202d·2027·7b7b·2073·7564··oers.··-·'{{·sud | |||
| 0003ecf0:·6f65·7273·2e66·696c·6573·207d·7d27·0a20··oers.files·}}'.· | |||
| Max diff block lines reached; 1242443/1261239 bytes (98.51%) of diff not shown. | |||
| Offset 231, 14 lines modified | Offset 231, 35 lines modified | ||
| 231 | ···························1.7,·SR·1.8,·SR·1.9 | 231 | ···························1.7,·SR·1.8,·SR·1.9 |
| 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 232 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 233 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 236 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 237 | ···························SRG-OS-000373-GPOS-00158 | 237 | ···························SRG-OS-000373-GPOS-00158 |
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 243 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 244 | ··if·[·!·-e·"$f"·]·;·then | ||
| 245 | ····continue | ||
| 246 | ··fi | ||
| 247 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 248 | ··if·!·test·-z·"$matching_list";·then | ||
| 249 | ····while·IFS=·read·-r·entry;·do | ||
| 250 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 251 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 252 | ····done·<<<·"$matching_list" | ||
| 253 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 254 | visudo" | ||
| 255 | ··fi | ||
| 256 | done | ||
| 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 257 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 258 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 259 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 260 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 261 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 243 | -·name:·Find·/etc/sudoers.d/·files | 262 | -·name:·Find·/etc/sudoers.d/·files |
| 244 | ··ansible.builtin.find: | 263 | ··ansible.builtin.find: |
| Offset 269, 35 lines modified | Offset 290, 14 lines modified | ||
| 269 | ··-·NIST-800-53-IA-11 | 290 | ··-·NIST-800-53-IA-11 |
| 270 | ··-·low_complexity | 291 | ··-·low_complexity |
| 271 | ··-·low_disruption | 292 | ··-·low_disruption |
| 272 | ··-·medium_severity | 293 | ··-·medium_severity |
| 273 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 274 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 275 | ··-·sudo_remove_no_authenticate | 296 | ··-·sudo_remove_no_authenticate |
| 276 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 277 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 278 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 279 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 280 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 281 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 282 | ··if·[·!·-e·"$f"·]·;·then | ||
| 283 | ····continue | ||
| 284 | ··fi | ||
| 285 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 286 | ··if·!·test·-z·"$matching_list";·then | ||
| 287 | ····while·IFS=·read·-r·entry;·do | ||
| 288 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 289 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 290 | ····done·<<<·"$matching_list" | ||
| 291 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 292 | visudo" | ||
| 293 | ··fi | ||
| 294 | done | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 298 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 299 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 300 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 301 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 302 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 301 | ············Without·re-authentication,·users·may·access·resources·or·perform | 303 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 318, 14 lines modified | Offset 318, 35 lines modified | ||
| 318 | ···························1.7,·SR·1.8,·SR·1.9 | 318 | ···························1.7,·SR·1.8,·SR·1.9 |
| 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 319 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 320 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 321 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 322 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 324 | ···························SRG-OS-000373-GPOS-00158 | 324 | ···························SRG-OS-000373-GPOS-00158 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 331 | ··if·[·!·-e·"$f"·]·;·then | ||
| 332 | ····continue | ||
| 333 | ··fi | ||
| 334 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 335 | ··if·!·test·-z·"$matching_list";·then | ||
| 336 | ····while·IFS=·read·-r·entry;·do | ||
| 337 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 338 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 339 | ····done·<<<·"$matching_list" | ||
| 340 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 341 | visudo" | ||
| 342 | ··fi | ||
| 343 | done | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Find·/etc/sudoers.d/·files | 349 | -·name:·Find·/etc/sudoers.d/·files |
| 331 | ··ansible.builtin.find: | 350 | ··ansible.builtin.find: |
| Offset 356, 35 lines modified | Offset 377, 14 lines modified | ||
| 356 | ··-·NIST-800-53-IA-11 | 377 | ··-·NIST-800-53-IA-11 |
| 357 | ··-·low_complexity | 378 | ··-·low_complexity |
| 358 | ··-·low_disruption | 379 | ··-·low_disruption |
| 359 | ··-·medium_severity | 380 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 381 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 382 | ··-·restrict_strategy |
| 362 | ··-·sudo_remove_nopasswd | 383 | ··-·sudo_remove_nopasswd |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 368 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 369 | ··if·[·!·-e·"$f"·]·;·then | ||
| 370 | ····continue | ||
| 371 | ··fi | ||
| 372 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 373 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 148167/153615 bytes (96.45%) of diff not shown. | |||
| Offset 14776, 146 lines modified | Offset 14776, 146 lines modified | ||
| 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 00039b70:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 00039b80:·3033·3122·2074·6162·696e·6465·783d·2230··031"·tabindex="0 | 00039b80:·3033·3122·2074·6162·696e·6465·783d·2230··031"·tabindex="0 | ||
| 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039ba0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039bb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039bc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039bd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039be0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039bf0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00039c00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039c10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039c20:·7365·2220·6964·3d22·6964·6d34·3033·3122··se"·id="idm4031" | |||
| 00039c30:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c40:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c50:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039c60:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039c70:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039c80:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c90:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039ca0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039cb0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039cc0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039cd0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039ce0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cf0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039d00:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00039d10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00039d20:·3c70·7265·3e3c·636f·6465·3e0a·666f·7220··<pre><code>.for· | |||
| 00039d30:·6620·696e·202f·6574·632f·7375·646f·6572··f·in·/etc/sudoer | |||
| 00039d40:·7320·2f65·7463·2f73·7564·6f65·7273·2e64··s·/etc/sudoers.d | |||
| 00039d50:·2f2a·203b·2064·6f0a·2020·6966·205b·2021··/*·;·do.··if·[·! | |||
| 00039d60:·202d·6520·2224·6622·205d·203b·2074·6865···-e·"$f"·]·;·the | |||
| 00039d70:·6e0a·2020·2020·636f·6e74·696e·7565·0a20··n.····continue.· | |||
| 00039d80:·2066·690a·2020·6d61·7463·6869·6e67·5f6c···fi.··matching_l | |||
| 00039d90:·6973·743d·2428·6772·6570·202d·5020·275e··ist=$(grep·-P·'^ | |||
| 00039da0:·283f·2123·292e·2a5b·5c73·5d2b·5c21·6175··(?!#).*[\s]+\!au | |||
| 00039db0:·7468·656e·7469·6361·7465·2e2a·2427·2024··thenticate.*$'·$ | |||
| 00039dc0:·6620·7c20·756e·6971·2029·0a20·2069·6620··f·|·uniq·).··if· | |||
| 00039dd0:·2120·7465·7374·202d·7a20·2224·6d61·7463··!·test·-z·"$matc | |||
| 00039de0:·6869·6e67·5f6c·6973·7422·3b20·7468·656e··hing_list";·then | |||
| 00039df0:·0a20·2020·2077·6869·6c65·2049·4653·3d20··.····while·IFS=· | |||
| 00039e00:·7265·6164·202d·7220·656e·7472·793b·2064··read·-r·entry;·d | |||
| 00039e10:·6f0a·2020·2020·2020·2320·636f·6d6d·656e··o.······#·commen | |||
| 00039e20:·7420·6f75·7420·2221·6175·7468·656e·7469··t·out·"!authenti | |||
| 00039e30:·6361·7465·2220·6d61·7463·6865·7320·746f··cate"·matches·to | |||
| 00039e40:·2070·7265·7365·7276·6520·7573·6572·2064···preserve·user·d | |||
| 00039e50:·6174·610a·2020·2020·2020·7365·6420·2d69··ata.······sed·-i | |||
| 00039e60:·2022·732f·5e24·7b65·6e74·7279·7d24·2f23···"s/^${entry}$/# | |||
| 00039e70:·2026·616d·703b·2f67·2220·2466·0a20·2020···&/g"·$f.··· | |||
| 00039e80:·2064·6f6e·6520·266c·743b·266c·743b·266c···done·<<&l | |||
| 00039e90:·743b·2022·246d·6174·6368·696e·675f·6c69··t;·"$matching_li | |||
| 00039ea0:·7374·220a·0a20·2020·202f·7573·722f·7362··st"..····/usr/sb | |||
| 00039eb0:·696e·2f76·6973·7564·6f20·2d63·6620·2466··in/visudo·-cf·$f | |||
| 00039ec0:·2026·616d·703b·2667·743b·202f·6465·762f···&>·/dev/ | |||
| 00039ed0:·6e75·6c6c·207c·7c20·6563·686f·2022·4661··null·||·echo·"Fa | |||
| 00039ee0:·696c·2074·6f20·7661·6c69·6461·7465·2024··il·to·validate·$ | |||
| 00039ef0:·6620·7769·7468·2076·6973·7564·6f22·0a20··f·with·visudo".· | |||
| 00039f00:·2066·690a·646f·6e65·0a3c·2f63·6f64·653e···fi.done.</code> | |||
| 00039f10:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f20:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f30:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f40:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f50:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | |||
| 00039f60:·3033·3222·2074·6162·696e·6465·783d·2230··032"·tabindex="0 | |||
| 00039f70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039f80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039f90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fa0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039 | 00039fc0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00039 | 00039fd0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00039 | 00039fe0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00039 | 00039ff0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00039c20:·6c61·7073·6522·2069·643d·2269·646d·3430··lapse"·id="idm40 | |||
| 00039c30:·3331·223e·3c74·6162·6c65·2063·6c61·7373··31"><table·class | |||
| 00039c40:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00039c50:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00039c60:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00039c70:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00039c80:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00039c90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039ca0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00039cb0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00039cc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039cd0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00039ce0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00039cf0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00039d00:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 00039d10:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 00039d20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039d30:·6e61·6d65·3a20·4669·6e64·202f·6574·632f··name:·Find·/etc/ | |||
| 00039d40:·7375·646f·6572·732e·642f·2066·696c·6573··sudoers.d/·files | |||
| 00039d50:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 00039d60:·696e·2e66·696e·643a·0a20·2020·2070·6174··in.find:.····pat | |||
| 00039d70:·6873·3a0a·2020·2020·2d20·2f65·7463·2f73··hs:.····-·/etc/s | |||
| 00039d80:·7564·6f65·7273·2e64·2f0a·2020·7265·6769··udoers.d/.··regi | |||
| 00039d90:·7374·6572·3a20·7375·646f·6572·730a·2020··ster:·sudoers.·· | |||
| 00039da0:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00039db0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00039dc0:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | |||
| 00039dd0:·2d31·310a·2020·2d20·6c6f·775f·636f·6d70··-11.··-·low_comp | |||
| 00039de0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00039df0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00039e00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00039e10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00039e20:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | |||
| 00039e30:·7374·7261·7465·6779·0a20·202d·2073·7564··strategy.··-·sud | |||
| 00039e40:·6f5f·7265·6d6f·7665·5f6e·6f5f·6175·7468··o_remove_no_auth | |||
| 00039e50:·656e·7469·6361·7465·0a0a·2d20·6e61·6d65··enticate..-·name | |||
| 00039e60:·3a20·5265·6d6f·7665·206c·696e·6573·2063··:·Remove·lines·c | |||
| 00039e70:·6f6e·7461·696e·696e·6720·2161·7574·6865··ontaining·!authe | |||
| 00039e80:·6e74·6963·6174·6520·6672·6f6d·2073·7564··nticate·from·sud | |||
| 00039e90:·6f65·7273·2066·696c·6573·0a20·2061·6e73··oers·files.··ans | |||
| 00039ea0:·6962·6c65·2e62·7569·6c74·696e·2e72·6570··ible.builtin.rep | |||
| 00039eb0:·6c61·6365·3a0a·2020·2020·7265·6765·7870··lace:.····regexp | |||
| 00039ec0:·3a20·285e·283f·2123·292e·2a5b·5c73·5d2b··:·(^(?!#).*[\s]+ | |||
| 00039ed0:·5c21·6175·7468·656e·7469·6361·7465·2e2a··\!authenticate.* | |||
| 00039ee0:·2429·0a20·2020·2072·6570·6c61·6365·3a20··$).····replace:· | |||
| 00039ef0:·2723·205c·6726·6c74·3b31·2667·743b·270a··'#·\g<1>'. | |||
| 00039f00:·2020·2020·7061·7468·3a20·277b·7b20·6974······path:·'{{·it | |||
| 00039f10:·656d·2e70·6174·6820·7d7d·270a·2020·2020··em.path·}}'.···· | |||
| 00039f20:·7661·6c69·6461·7465·3a20·2f75·7372·2f73··validate:·/usr/s | |||
| 00039f30:·6269·6e2f·7669·7375·646f·202d·6366·2025··bin/visudo·-cf·% | |||
| 00039f40:·730a·2020·7769·7468·5f69·7465·6d73·3a0a··s.··with_items:. | |||
| 00039f50:·2020·2d20·7061·7468·3a20·2f65·7463·2f73····-·path:·/etc/s | |||
| 00039f60:·7564·6f65·7273·0a20·202d·2027·7b7b·2073··udoers.··-·'{{·s | |||
| 00039f70:·7564·6f65·7273·2e66·696c·6573·207d·7d27··udoers.files·}}' | |||
| Max diff block lines reached; 361872/380668 bytes (95.06%) of diff not shown. | |||
| Offset 91, 14 lines modified | Offset 91, 35 lines modified | ||
| 91 | ···························1.7,·SR·1.8,·SR·1.9 | 91 | ···························1.7,·SR·1.8,·SR·1.9 |
| 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 92 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 93 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 94 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 95 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 96 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 97 | ···························SRG-OS-000373-GPOS-00158 | 97 | ···························SRG-OS-000373-GPOS-00158 |
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 103 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 104 | ··if·[·!·-e·"$f"·]·;·then | ||
| 105 | ····continue | ||
| 106 | ··fi | ||
| 107 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 108 | ··if·!·test·-z·"$matching_list";·then | ||
| 109 | ····while·IFS=·read·-r·entry;·do | ||
| 110 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 111 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 112 | ····done·<<<·"$matching_list" | ||
| 113 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 114 | visudo" | ||
| 115 | ··fi | ||
| 116 | done | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 103 | -·name:·Find·/etc/sudoers.d/·files | 122 | -·name:·Find·/etc/sudoers.d/·files |
| 104 | ··ansible.builtin.find: | 123 | ··ansible.builtin.find: |
| Offset 129, 35 lines modified | Offset 150, 14 lines modified | ||
| 129 | ··-·NIST-800-53-IA-11 | 150 | ··-·NIST-800-53-IA-11 |
| 130 | ··-·low_complexity | 151 | ··-·low_complexity |
| 131 | ··-·low_disruption | 152 | ··-·low_disruption |
| 132 | ··-·medium_severity | 153 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 134 | ··-·restrict_strategy | 155 | ··-·restrict_strategy |
| 135 | ··-·sudo_remove_no_authenticate | 156 | ··-·sudo_remove_no_authenticate |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 141 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 142 | ··if·[·!·-e·"$f"·]·;·then | ||
| 143 | ····continue | ||
| 144 | ··fi | ||
| 145 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 146 | ··if·!·test·-z·"$matching_list";·then | ||
| 147 | ····while·IFS=·read·-r·entry;·do | ||
| 148 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 149 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 150 | ····done·<<<·"$matching_list" | ||
| 151 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 152 | visudo" | ||
| 153 | ··fi | ||
| 154 | done | ||
| 155 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 156 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 159 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 158 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 160 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 159 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 161 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 160 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 162 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 161 | ············Without·re-authentication,·users·may·access·resources·or·perform | 163 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 178, 14 lines modified | Offset 178, 35 lines modified | ||
| 178 | ···························1.7,·SR·1.8,·SR·1.9 | 178 | ···························1.7,·SR·1.8,·SR·1.9 |
| 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 179 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 180 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 181 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 182 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 183 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 184 | ···························SRG-OS-000373-GPOS-00158 | 184 | ···························SRG-OS-000373-GPOS-00158 |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 191 | ··if·[·!·-e·"$f"·]·;·then | ||
| 192 | ····continue | ||
| 193 | ··fi | ||
| 194 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 195 | ··if·!·test·-z·"$matching_list";·then | ||
| 196 | ····while·IFS=·read·-r·entry;·do | ||
| 197 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 198 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 199 | ····done·<<<·"$matching_list" | ||
| 200 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 201 | visudo" | ||
| 202 | ··fi | ||
| 203 | done | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 190 | -·name:·Find·/etc/sudoers.d/·files | 209 | -·name:·Find·/etc/sudoers.d/·files |
| 191 | ··ansible.builtin.find: | 210 | ··ansible.builtin.find: |
| Offset 216, 35 lines modified | Offset 237, 14 lines modified | ||
| 216 | ··-·NIST-800-53-IA-11 | 237 | ··-·NIST-800-53-IA-11 |
| 217 | ··-·low_complexity | 238 | ··-·low_complexity |
| 218 | ··-·low_disruption | 239 | ··-·low_disruption |
| 219 | ··-·medium_severity | 240 | ··-·medium_severity |
| 220 | ··-·no_reboot_needed | 241 | ··-·no_reboot_needed |
| 221 | ··-·restrict_strategy | 242 | ··-·restrict_strategy |
| 222 | ··-·sudo_remove_nopasswd | 243 | ··-·sudo_remove_nopasswd |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 229 | ··if·[·!·-e·"$f"·]·;·then | ||
| 230 | ····continue | ||
| 231 | ··fi | ||
| 232 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 233 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 47216/52661 bytes (89.66%) of diff not shown. | |||
| Offset 16006, 146 lines modified | Offset 16006, 146 lines modified | ||
| 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003e850:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003e860:·2223·6964·6d34·3033·3122·2074·6162·696e··"#idm4031"·tabin | 0003e860:·2223·6964·6d34·3033·3122·2074·6162·696e··"#idm4031"·tabin | ||
| 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003e870:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003e880:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003e890:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003e8a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003e8b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003e8c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003e8d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003e8e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003e8f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003e900:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003e910:·6d34·3033·3122·3e3c·7461·626c·6520·636c··m4031"><table·cl | |||
| 0003e920:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003e930:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003e940:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003e950:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003e960:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003e970:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003e980:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003e990:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003e9a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e9b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003e9c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003e9d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003e9e0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003e9f0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003ea00:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ea10:·3e0a·666f·7220·6620·696e·202f·6574·632f··>.for·f·in·/etc/ | |||
| 0003ea20:·7375·646f·6572·7320·2f65·7463·2f73·7564··sudoers·/etc/sud | |||
| 0003ea30:·6f65·7273·2e64·2f2a·203b·2064·6f0a·2020··oers.d/*·;·do.·· | |||
| 0003ea40:·6966·205b·2021·202d·6520·2224·6622·205d··if·[·!·-e·"$f"·] | |||
| 0003ea50:·203b·2074·6865·6e0a·2020·2020·636f·6e74···;·then.····cont | |||
| 0003ea60:·696e·7565·0a20·2066·690a·2020·6d61·7463··inue.··fi.··matc | |||
| 0003ea70:·6869·6e67·5f6c·6973·743d·2428·6772·6570··hing_list=$(grep | |||
| 0003ea80:·202d·5020·275e·283f·2123·292e·2a5b·5c73···-P·'^(?!#).*[\s | |||
| 0003ea90:·5d2b·5c21·6175·7468·656e·7469·6361·7465··]+\!authenticate | |||
| 0003eaa0:·2e2a·2427·2024·6620·7c20·756e·6971·2029··.*$'·$f·|·uniq·) | |||
| 0003eab0:·0a20·2069·6620·2120·7465·7374·202d·7a20··.··if·!·test·-z· | |||
| 0003eac0:·2224·6d61·7463·6869·6e67·5f6c·6973·7422··"$matching_list" | |||
| 0003ead0:·3b20·7468·656e·0a20·2020·2077·6869·6c65··;·then.····while | |||
| 0003eae0:·2049·4653·3d20·7265·6164·202d·7220·656e···IFS=·read·-r·en | |||
| 0003eaf0:·7472·793b·2064·6f0a·2020·2020·2020·2320··try;·do.······#· | |||
| 0003eb00:·636f·6d6d·656e·7420·6f75·7420·2221·6175··comment·out·"!au | |||
| 0003eb10:·7468·656e·7469·6361·7465·2220·6d61·7463··thenticate"·matc | |||
| 0003eb20:·6865·7320·746f·2070·7265·7365·7276·6520··hes·to·preserve· | |||
| 0003eb30:·7573·6572·2064·6174·610a·2020·2020·2020··user·data.······ | |||
| 0003eb40:·7365·6420·2d69·2022·732f·5e24·7b65·6e74··sed·-i·"s/^${ent | |||
| 0003eb50:·7279·7d24·2f23·2026·616d·703b·2f67·2220··ry}$/#·&/g"· | |||
| 0003eb60:·2466·0a20·2020·2064·6f6e·6520·266c·743b··$f.····done·< | |||
| 0003eb70:·266c·743b·266c·743b·2022·246d·6174·6368··<<·"$match | |||
| 0003eb80:·696e·675f·6c69·7374·220a·0a20·2020·202f··ing_list"..····/ | |||
| 0003eb90:·7573·722f·7362·696e·2f76·6973·7564·6f20··usr/sbin/visudo· | |||
| 0003eba0:·2d63·6620·2466·2026·616d·703b·2667·743b··-cf·$f·&> | |||
| 0003ebb0:·202f·6465·762f·6e75·6c6c·207c·7c20·6563···/dev/null·||·ec | |||
| 0003ebc0:·686f·2022·4661·696c·2074·6f20·7661·6c69··ho·"Fail·to·vali | |||
| 0003ebd0:·6461·7465·2024·6620·7769·7468·2076·6973··date·$f·with·vis | |||
| 0003ebe0:·7564·6f22·0a20·2066·690a·646f·6e65·0a3c··udo".··fi.done.< | |||
| 0003ebf0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ec00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ec10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ec20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ec30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ec40:·2223·6964·6d34·3033·3222·2074·6162·696e··"#idm4032"·tabin | |||
| 0003ec50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ec60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ec70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ec80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ec90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003e | 0003eca0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003e | 0003ecb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003e | 0003ecc0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003e | 0003ecd0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003e900:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003e910:·2269·646d·3430·3331·223e·3c74·6162·6c65··"idm4031"><table | |||
| 0003e920:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003e930:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003e940:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003e950:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003e960:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003e970:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003e980:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003e990:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003e9a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003e9b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003e9c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003e9d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003e9e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003e9f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ea00:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ea10:·6f64·653e·2d20·6e61·6d65·3a20·4669·6e64··ode>-·name:·Find | |||
| 0003ea20:·202f·6574·632f·7375·646f·6572·732e·642f···/etc/sudoers.d/ | |||
| 0003ea30:·2066·696c·6573·0a20·2061·6e73·6962·6c65···files.··ansible | |||
| 0003ea40:·2e62·7569·6c74·696e·2e66·696e·643a·0a20··.builtin.find:.· | |||
| 0003ea50:·2020·2070·6174·6873·3a0a·2020·2020·2d20·····paths:.····-· | |||
| 0003ea60:·2f65·7463·2f73·7564·6f65·7273·2e64·2f0a··/etc/sudoers.d/. | |||
| 0003ea70:·2020·7265·6769·7374·6572·3a20·7375·646f····register:·sudo | |||
| 0003ea80:·6572·730a·2020·7461·6773·3a0a·2020·2d20··ers.··tags:.··-· | |||
| 0003ea90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003eaa0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003eab0:·2d35·332d·4941·2d31·310a·2020·2d20·6c6f··-53-IA-11.··-·lo | |||
| 0003eac0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ead0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003eae0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003eaf0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003eb00:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | |||
| 0003eb10:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | |||
| 0003eb20:·202d·2073·7564·6f5f·7265·6d6f·7665·5f6e···-·sudo_remove_n | |||
| 0003eb30:·6f5f·6175·7468·656e·7469·6361·7465·0a0a··o_authenticate.. | |||
| 0003eb40:·2d20·6e61·6d65·3a20·5265·6d6f·7665·206c··-·name:·Remove·l | |||
| 0003eb50:·696e·6573·2063·6f6e·7461·696e·696e·6720··ines·containing· | |||
| 0003eb60:·2161·7574·6865·6e74·6963·6174·6520·6672··!authenticate·fr | |||
| 0003eb70:·6f6d·2073·7564·6f65·7273·2066·696c·6573··om·sudoers·files | |||
| 0003eb80:·0a20·2061·6e73·6962·6c65·2e62·7569·6c74··.··ansible.built | |||
| 0003eb90:·696e·2e72·6570·6c61·6365·3a0a·2020·2020··in.replace:.···· | |||
| 0003eba0:·7265·6765·7870·3a20·285e·283f·2123·292e··regexp:·(^(?!#). | |||
| 0003ebb0:·2a5b·5c73·5d2b·5c21·6175·7468·656e·7469··*[\s]+\!authenti | |||
| 0003ebc0:·6361·7465·2e2a·2429·0a20·2020·2072·6570··cate.*$).····rep | |||
| 0003ebd0:·6c61·6365·3a20·2723·205c·6726·6c74·3b31··lace:·'#·\g<1 | |||
| 0003ebe0:·2667·743b·270a·2020·2020·7061·7468·3a20··>'.····path:· | |||
| 0003ebf0:·277b·7b20·6974·656d·2e70·6174·6820·7d7d··'{{·item.path·}} | |||
| 0003ec00:·270a·2020·2020·7661·6c69·6461·7465·3a20··'.····validate:· | |||
| 0003ec10:·2f75·7372·2f73·6269·6e2f·7669·7375·646f··/usr/sbin/visudo | |||
| 0003ec20:·202d·6366·2025·730a·2020·7769·7468·5f69···-cf·%s.··with_i | |||
| 0003ec30:·7465·6d73·3a0a·2020·2d20·7061·7468·3a20··tems:.··-·path:· | |||
| 0003ec40:·2f65·7463·2f73·7564·6f65·7273·0a20·202d··/etc/sudoers.··- | |||
| 0003ec50:·2027·7b7b·2073·7564·6f65·7273·2e66·696c···'{{·sudoers.fil | |||
| Max diff block lines reached; 1199083/1217879 bytes (98.46%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 35 lines modified | ||
| 229 | ···························1.7,·SR·1.8,·SR·1.9 | 229 | ···························1.7,·SR·1.8,·SR·1.9 |
| 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 230 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 231 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 234 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 235 | ···························SRG-OS-000373-GPOS-00158 | 235 | ···························SRG-OS-000373-GPOS-00158 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 241 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 242 | ··if·[·!·-e·"$f"·]·;·then | ||
| 243 | ····continue | ||
| 244 | ··fi | ||
| 245 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 246 | ··if·!·test·-z·"$matching_list";·then | ||
| 247 | ····while·IFS=·read·-r·entry;·do | ||
| 248 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 249 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 250 | ····done·<<<·"$matching_list" | ||
| 251 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 252 | visudo" | ||
| 253 | ··fi | ||
| 254 | done | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 255 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 256 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 257 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 258 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 259 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·Find·/etc/sudoers.d/·files | 260 | -·name:·Find·/etc/sudoers.d/·files |
| 242 | ··ansible.builtin.find: | 261 | ··ansible.builtin.find: |
| Offset 267, 35 lines modified | Offset 288, 14 lines modified | ||
| 267 | ··-·NIST-800-53-IA-11 | 288 | ··-·NIST-800-53-IA-11 |
| 268 | ··-·low_complexity | 289 | ··-·low_complexity |
| 269 | ··-·low_disruption | 290 | ··-·low_disruption |
| 270 | ··-·medium_severity | 291 | ··-·medium_severity |
| 271 | ··-·no_reboot_needed | 292 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 293 | ··-·restrict_strategy |
| 273 | ··-·sudo_remove_no_authenticate | 294 | ··-·sudo_remove_no_authenticate |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 279 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 280 | ··if·[·!·-e·"$f"·]·;·then | ||
| 281 | ····continue | ||
| 282 | ··fi | ||
| 283 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+\!authenticate.*$'·$f·|·uniq·) | ||
| 284 | ··if·!·test·-z·"$matching_list";·then | ||
| 285 | ····while·IFS=·read·-r·entry;·do | ||
| 286 | ······#·comment·out·"!authenticate"·matches·to·preserve·user·data | ||
| 287 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 288 | ····done·<<<·"$matching_list" | ||
| 289 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 290 | visudo" | ||
| 291 | ··fi | ||
| 292 | done | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o | 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·U\x8Us\x8se\x8er\x8rs\x8s·R\x8Re\x8e-\x8-A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8te\x8e·f\x8fo\x8or\x8r·P\x8Pr\x8ri\x8iv\x8vi\x8il\x8le\x8eg\x8ge\x8e·E\x8Es\x8sc\x8ca\x8al\x8la\x8at\x8ti\x8io\x8on\x8n·-\x8-·s\x8su\x8ud\x8do\x8o |
| 294 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 296 | N\x8NO\x8OP\x8PA\x8AS\x8SS\x8SW\x8WD\x8D·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using | 297 | The·sudo·NOPASSWD·tag,·when·specified,·allows·a·user·to·execute·commands·using |
| 296 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure | 298 | sudo·without·having·to·authenticate.·This·should·be·disabled·by·making·sure |
| 297 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any | 299 | that·the·NOPASSWD·tag·does·not·exist·in·/etc/sudoers·configuration·file·or·any |
| 298 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 300 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 299 | ············Without·re-authentication,·users·may·access·resources·or·perform | 301 | ············Without·re-authentication,·users·may·access·resources·or·perform |
| Offset 316, 14 lines modified | Offset 316, 35 lines modified | ||
| 316 | ···························1.7,·SR·1.8,·SR·1.9 | 316 | ···························1.7,·SR·1.8,·SR·1.9 |
| 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, | 317 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4, |
| 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 318 | ···························A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) | 319 | ············_\x8n_\x8i_\x8s_\x8t···········IA-11,·CM-6(a) |
| 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 | 320 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-7 |
| 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, | 321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000373-GPOS-00156,·SRG-OS-000373-GPOS-00157, |
| 322 | ···························SRG-OS-000373-GPOS-00158 | 322 | ···························SRG-OS-000373-GPOS-00158 |
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 328 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 329 | ··if·[·!·-e·"$f"·]·;·then | ||
| 330 | ····continue | ||
| 331 | ··fi | ||
| 332 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 333 | ··if·!·test·-z·"$matching_list";·then | ||
| 334 | ····while·IFS=·read·-r·entry;·do | ||
| 335 | ······#·comment·out·"NOPASSWD"·matches·to·preserve·user·data | ||
| 336 | ······sed·-i·"s/^${entry}$/#·&/g"·$f | ||
| 337 | ····done·<<<·"$matching_list" | ||
| 338 | ····/usr/sbin/visudo·-cf·$f·&>·/dev/null·||·echo·"Fail·to·validate·$f·with | ||
| 339 | visudo" | ||
| 340 | ··fi | ||
| 341 | done | ||
| 323 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 324 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 325 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 326 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 327 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 328 | -·name:·Find·/etc/sudoers.d/·files | 347 | -·name:·Find·/etc/sudoers.d/·files |
| 329 | ··ansible.builtin.find: | 348 | ··ansible.builtin.find: |
| Offset 354, 35 lines modified | Offset 375, 14 lines modified | ||
| 354 | ··-·NIST-800-53-IA-11 | 375 | ··-·NIST-800-53-IA-11 |
| 355 | ··-·low_complexity | 376 | ··-·low_complexity |
| 356 | ··-·low_disruption | 377 | ··-·low_disruption |
| 357 | ··-·medium_severity | 378 | ··-·medium_severity |
| 358 | ··-·no_reboot_needed | 379 | ··-·no_reboot_needed |
| 359 | ··-·restrict_strategy | 380 | ··-·restrict_strategy |
| 360 | ··-·sudo_remove_nopasswd | 381 | ··-·sudo_remove_nopasswd |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 366 | for·f·in·/etc/sudoers·/etc/sudoers.d/*·;·do | ||
| 367 | ··if·[·!·-e·"$f"·]·;·then | ||
| 368 | ····continue | ||
| 369 | ··fi | ||
| 370 | ··matching_list=$(grep·-P·'^(?!#).*[\s]+NOPASSWD[\s]*\:.*$'·$f·|·uniq·) | ||
| 371 | ··if·!·test·-z·"$matching_list";·then | ||
| Max diff block lines reached; 143447/148895 bytes (96.34%) of diff not shown. | |||
| Offset 16213, 778 lines modified | Offset 16213, 778 lines modified | ||
| 0003f540:·7461·7267·6574·3d22·2369·646d·3130·3334··target="#idm1034 | 0003f540:·7461·7267·6574·3d22·2369·646d·3130·3334··target="#idm1034 | ||
| 0003f550:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003f550:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003f560:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003f560:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003f570:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003f570:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003f580:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003f580:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003f590:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003f590:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (764 lines added, 764 lines removed) | |
| 0003f5a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003f5a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003f5b0:·7469·6f6e·20 | 0003f5b0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003f5c0:·7 | 0003f5c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003f5d0:· | 0003f5d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003f5e0:·6 | 0003f5e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003f5f0:· | 0003f5f0:·2220·6964·3d22·6964·6d31·3033·3437·223e··"·id="idm10347"> | ||
| 0003f600:·372 | 0003f600:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003f610:· | 0003f610:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003f620:·69 | 0003f620:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003f630:· | 0003f630:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003f640:· | 0003f640:·0a69·6620·6470·6b67·2d71·7565·7279·202d··.if·dpkg-query·- | ||
| 0003f650:· | 0003f650:·2d73·686f·7720·2d2d·7368·6f77·666f·726d··-show·--showform | ||
| 0003f660:· | 0003f660:·6174·3d27·247b·6462·3a53·7461·7475·732d··at='${db:Status- | ||
| 0003f670:· | 0003f670:·5374·6174·7573·7d0a·2720·276c·696e·7578··Status}.'·'linux | ||
| 0003f680:· | 0003f680:·2d62·6173·6527·2032·2667·743b·2f64·6576··-base'·2>/dev | ||
| 0003f690:· | 0003f690:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f6a0:· | 0003f6a0:·5e69·6e73·7461·6c6c·6564·2026·616d·703b··^installed·& | ||
| 0003f6b0:· | 0003f6b0:·2661·6d70·3b20·6470·6b67·2d71·7565·7279··&·dpkg-query | ||
| 0003f6c0:· | 0003f6c0:·202d·2d73·686f·7720·2d2d·7368·6f77·666f···--show·--showfo | ||
| 0003f6d0:·7 | 0003f6d0:·726d·6174·3d27·247b·6462·3a53·7461·7475··rmat='${db:Statu | ||
| 0003f6e0:· | 0003f6e0:·732d·5374·6174·7573·7d5c·6e27·2027·7273··s-Status}\n'·'rs | ||
| 0003f6f0:·7 | 0003f6f0:·7973·6c6f·6727·2032·2667·743b·2f64·6576··yslog'·2>/dev | ||
| 0003f700:· | 0003f700:·2f6e·756c·6c20·7c20·6772·6570·202d·7120··/null·|·grep·-q· | ||
| 0003f710:· | 0003f710:·275e·696e·7374·616c·6c65·6427·3b20·7468··'^installed';·th | ||
| 0003f720:· | 0003f720:·656e·0a0a·2320·4c69·7374·206f·6620·6c6f··en..#·List·of·lo | ||
| 0003f730:· | 0003f730:·6720·6669·6c65·2070·6174·6873·2074·6f20··g·file·paths·to· | ||
| 0003f740:·6 | 0003f740:·6265·2069·6e73·7065·6374·6564·2066·6f72··be·inspected·for | ||
| 0003f750:·20 | 0003f750:·2063·6f72·7265·6374·2070·6572·6d69·7373···correct·permiss | ||
| 0003f760:· | 0003f760:·696f·6e73·0a23·202a·2050·7269·6d61·7269··ions.#·*·Primari | ||
| 0003f770:· | 0003f770:·6c79·2069·6e73·7065·6374·206c·6f67·2066··ly·inspect·log·f | ||
| 0003f780:· | 0003f780:·696c·6520·7061·7468·7320·6c69·7374·6564··ile·paths·listed | ||
| 0003f790:· | 0003f790:·2069·6e20·2f65·7463·2f72·7379·736c·6f67···in·/etc/rsyslog | ||
| 0003f7a0:· | 0003f7a0:·2e63·6f6e·660a·5253·5953·4c4f·475f·4554··.conf.RSYSLOG_ET | ||
| 0003f7b0:·43 | 0003f7b0:·435f·434f·4e46·4947·3d22·2f65·7463·2f72··C_CONFIG="/etc/r | ||
| 0003f7c0:· | 0003f7c0:·7379·736c·6f67·2e63·6f6e·6622·0a23·202a··syslog.conf".#·* | ||
| 0003f7d0:·2 | 0003f7d0:·2041·6e64·2061·6c73·6f20·7468·6520·6c6f···And·also·the·lo | ||
| 0003f7e0:· | 0003f7e0:·6720·6669·6c65·2070·6174·6873·206c·6973··g·file·paths·lis | ||
| 0003f7f0:·7 | 0003f7f0:·7465·6420·6166·7465·7220·7273·7973·6c6f··ted·after·rsyslo | ||
| 0003f800:· | 0003f800:·6727·7320·2449·6e63·6c75·6465·436f·6e66··g's·$IncludeConf | ||
| 0003f810:·6 | 0003f810:·6967·2064·6972·6563·7469·7665·0a23·2020··ig·directive.#·· | ||
| 0003f820:· | 0003f820:·2028·7374·6f72·6520·7468·6520·7265·7375···(store·the·resu | ||
| 0003f830:·6 | 0003f830:·6c74·2069·6e74·6f20·6172·7261·7920·666f··lt·into·array·fo | ||
| 0003f840:·72 | 0003f840:·7220·7468·6520·6361·7365·2074·6865·7265··r·the·case·there | ||
| 0003f850:· | 0003f850:·2773·2073·6865·6c6c·2067·6c6f·6220·7573··'s·shell·glob·us | ||
| 0003f860:·6 | 0003f860:·6564·2061·7320·7661·6c75·6520·6f66·2049··ed·as·value·of·I | ||
| 0003f870:· | 0003f870:·6e63·6c75·6465·436f·6e66·6967·290a·7265··ncludeConfig).re | ||
| 0003f880:· | 0003f880:·6164·6172·7261·7920·2d74·204f·4c44·5f49··adarray·-t·OLD_I | ||
| 0003f890:·4 | 0003f890:·4e43·2026·6c74·3b20·266c·743b·2867·7265··NC·<·<(gre | ||
| 0003f8a0:· | 0003f8a0:·7020·2d65·2022·5c24·496e·636c·7564·6543··p·-e·"\$IncludeC | ||
| 0003f8b0:·6 | 0003f8b0:·6f6e·6669·675b·5b3a·7370·6163·653a·5d5d··onfig[[:space:]] | ||
| 0003f8c0:· | 0003f8c0:·5c2b·5b5e·5b3a·7370·6163·653a·5d3b·5d5c··\+[^[:space:];]\ | ||
| 0003f8d0:· | 0003f8d0:·2b22·202f·6574·632f·7273·7973·6c6f·672e··+"·/etc/rsyslog. | ||
| 0003f8e0:· | 0003f8e0:·636f·6e66·207c·2063·7574·202d·6420·2720··conf·|·cut·-d·'· | ||
| 0003f8f0:· | 0003f8f0:·2720·2d66·2032·290a·7265·6164·6172·7261··'·-f·2).readarra | ||
| 0003f900:·7 | 0003f900:·7920·2d74·2052·5359·534c·4f47·5f49·4e43··y·-t·RSYSLOG_INC | ||
| 0003f910:· | 0003f910:·4c55·4445·5f43·4f4e·4649·4720·266c·743b··LUDE_CONFIG·< | ||
| 0003f920:· | 0003f920:·2026·6c74·3b28·666f·7220·494e·4350·4154···<(for·INCPAT | ||
| 0003f930:· | 0003f930:·4820·696e·2022·247b·4f4c·445f·494e·435b··H·in·"${OLD_INC[ | ||
| 0003f940:· | 0003f940:·405d·7d22·3b20·646f·2065·7661·6c20·7072··@]}";·do·eval·pr | ||
| 0003f950:· | 0003f950:·696e·7466·2027·2573·5c5c·6e27·2022·247b··intf·'%s\\n'·"${ | ||
| 0003f960:· | 0003f960:·494e·4350·4154·487d·223b·2064·6f6e·6529··INCPATH}";·done) | ||
| 0003f970:·0a | 0003f970:·0a72·6561·6461·7272·6179·202d·7420·4e45··.readarray·-t·NE | ||
| 0003f980:· | 0003f980:·575f·494e·4320·266c·743b·2026·6c74·3b28··W_INC·<·<( | ||
| 0003f990:· | 0003f990:·7365·6420·2d6e·2027·2f5e·5c73·2a69·6e63··sed·-n·'/^\s*inc | ||
| 0003f9a0:· | 0003f9a0:·6c75·6465·282f·2c2f·292f·4970·2720·2f65··lude(/,/)/Ip'·/e | ||
| 0003f9b0:· | 0003f9b0:·7463·2f72·7379·736c·6f67·2e63·6f6e·6620··tc/rsyslog.conf· | ||
| 0003f9c0:· | 0003f9c0:·7c20·7365·6420·2d6e·2027·7340·2e2a·6669··|·sed·-n·'s@.*fi | ||
| 0003f9d0:· | 0003f9d0:·6c65·5c73·2a3d·5c73·2a22·5c28·5b2f·5b3a··le\s*=\s*"\([/[: | ||
| 0003f9e0:· | 0003f9e0:·616c·6e75·6d3a·5d5b·3a70·756e·6374·3a5d··alnum:][:punct:] | ||
| 0003f9f0:· | 0003f9f0:·5d2a·5c29·222e·2a40·5c31·4049·7027·290a··]*\)".*@\1@Ip'). | ||
| 0003fa00:· | 0003fa00:·7265·6164·6172·7261·7920·2d74·2052·5359··readarray·-t·RSY | ||
| 0003fa10:· | 0003fa10:·534c·4f47·5f49·4e43·4c55·4445·2026·6c74··SLOG_INCLUDE·< | ||
| 0003fa20:· | 0003fa20:·3b20·266c·743b·2866·6f72·2049·4e43·5041··;·<(for·INCPA | ||
| 0003fa30:· | 0003fa30:·5448·2069·6e20·2224·7b4e·4557·5f49·4e43··TH·in·"${NEW_INC | ||
| 0003fa40:· | 0003fa40:·5b40·5d7d·223b·2064·6f20·6576·616c·2070··[@]}";·do·eval·p | ||
| 0003fa50:· | 0003fa50:·7269·6e74·6620·2725·735c·5c6e·2720·2224··rintf·'%s\\n'·"$ | ||
| 0003fa60:· | 0003fa60:·7b49·4e43·5041·5448·7d22·3b20·646f·6e65··{INCPATH}";·done | ||
| 0003fa70:· | 0003fa70:·290a·0a23·2044·6563·6c61·7265·2061·6e20··)..#·Declare·an· | ||
| 0003fa80:· | 0003fa80:·6172·7261·7920·746f·2068·6f6c·6420·7468··array·to·hold·th | ||
| 0003fa90:·20 | 0003fa90:·6520·6669·6e61·6c20·6c69·7374·206f·6620··e·final·list·of· | ||
| 0003faa0:· | 0003faa0:·6469·6666·6572·656e·7420·6c6f·6720·6669··different·log·fi | ||
| 0003fab0:·6 | 0003fab0:·6c65·2070·6174·6873·0a64·6563·6c61·7265··le·paths.declare | ||
| 0003fac0:· | 0003fac0:·202d·6120·4c4f·475f·4649·4c45·5f50·4154···-a·LOG_FILE_PAT | ||
| 0003fad0:· | 0003fad0:·4853·0a0a·2320·4172·7261·7920·746f·2068··HS..#·Array·to·h | ||
| 0003fae0:·6 | 0003fae0:·6f6c·6420·616c·6c20·7273·7973·6c6f·6720··old·all·rsyslog· | ||
| 0003faf0:· | 0003faf0:·636f·6e66·6967·2065·6e74·7269·6573·0a52··config·entries.R | ||
| 0003fb00:· | 0003fb00:·5359·534c·4f47·5f43·4f4e·4649·4753·3d28··SYSLOG_CONFIGS=( | ||
| 0003fb10:· | 0003fb10:·290a·5253·5953·4c4f·475f·434f·4e46·4947··).RSYSLOG_CONFIG | ||
| 0003fb20:· | 0003fb20:·533d·2822·247b·5253·5953·4c4f·475f·4554··S=("${RSYSLOG_ET | ||
| 0003fb30:· | 0003fb30:·435f·434f·4e46·4947·7d22·2022·247b·5253··C_CONFIG}"·"${RS | ||
| 0003fb40:· | 0003fb40:·5953·4c4f·475f·494e·434c·5544·455f·434f··YSLOG_INCLUDE_CO | ||
| 0003fb50:· | 0003fb50:·4e46·4947·5b40·5d7d·2220·2224·7b52·5359··NFIG[@]}"·"${RSY | ||
| 0003fb60:· | 0003fb60:·534c·4f47·5f49·4e43·4c55·4445·5b40·5d7d··SLOG_INCLUDE[@]} | ||
| 0003fb70:· | 0003fb70:·2229·0a0a·2320·4765·7420·6675·6c6c·206c··")..#·Get·full·l | ||
| 0003fb80:· | 0003fb80:·6973·7420·6f66·2066·696c·6573·2074·6f20··ist·of·files·to· | ||
| 0003fb90:·6 | 0003fb90:·6265·2063·6865·636b·6564·0a23·2052·5359··be·checked.#·RSY | ||
| 0003fba0:· | 0003fba0:·534c·4f47·5f43·4f4e·4649·4753·206d·6179··SLOG_CONFIGS·may | ||
| 0003fbb0:· | 0003fbb0:·2063·6f6e·7461·696e·2067·6c6f·6273·2073···contain·globs·s | ||
| 0003fbc0:· | 0003fbc0:·7563·6820·6173·0a23·202f·6574·632f·7273··uch·as.#·/etc/rs | ||
| 0003fbd0:· | 0003fbd0:·7973·6c6f·672e·642f·2a2e·636f·6e66·202f··yslog.d/*.conf·/ | ||
| 0003fbe0:· | 0003fbe0:·6574·632f·7273·7973·6c6f·672e·642f·2a2e··etc/rsyslog.d/*. | ||
| 0003fbf0:· | 0003fbf0:·6672·756c·650a·2320·536f·2c20·6c6f·6f70··frule.#·So,·loop | ||
| 0003fc00:·2 | 0003fc00:·206f·7665·7220·7468·6520·656e·7472·6965···over·the·entrie | ||
| 0003fc10:· | 0003fc10:·7320·696e·2052·5359·534c·4f47·5f43·4f4e··s·in·RSYSLOG_CON | ||
| 0003fc20:· | 0003fc20:·4649·4753·2061·6e64·2075·7365·2066·696e··FIGS·and·use·fin | ||
| 0003fc30:·6 | 0003fc30:·6420·746f·2067·6574·2074·6865·206c·6973··d·to·get·the·lis | ||
| 0003fc40:· | 0003fc40:·7420·6f66·2069·6e63·6c75·6465·6420·6669··t·of·included·fi | ||
| 0003fc50:· | 0003fc50:·6c65·732e·0a52·5359·534c·4f47·5f43·4f4e··les..RSYSLOG_CON | ||
| 0003fc60:· | 0003fc60:·4649·475f·4649·4c45·533d·2829·0a66·6f72··FIG_FILES=().for | ||
| 0003fc70:· | 0003fc70:·2045·4e54·5259·2069·6e20·2224·7b52·5359···ENTRY·in·"${RSY | ||
| 0003fc80:·5 | 0003fc80:·534c·4f47·5f43·4f4e·4649·4753·5b40·5d7d··SLOG_CONFIGS[@]} | ||
| 0003fc90:· | 0003fc90:·220a·646f·0a09·2320·4966·2064·6972·6563··".do..#·If·direc | ||
| 0003fca0:· | 0003fca0:·746f·7279·2c20·7273·7973·6c6f·6720·7769··tory,·rsyslog·wi | ||
| 0003fcb0:·6 | 0003fcb0:·6c6c·2073·6561·7263·6820·666f·7220·636f··ll·search·for·co | ||
| 0003fcc0:·6 | 0003fcc0:·6e66·6967·2066·696c·6573·2069·6e20·7265··nfig·files·in·re | ||
| 0003fcd0:· | 0003fcd0:·6375·7273·6976·656c·792e·0a09·2320·486f··cursively...#·Ho | ||
| 0003fce0:·7 | 0003fce0:·7765·7665·722c·2066·696c·6573·2069·6e20··wever,·files·in· | ||
| 0003fcf0:·6 | 0003fcf0:·6869·6464·656e·2073·7562·2d64·6972·6563··hidden·sub-direc | ||
| 0003fd00:·46 | 0003fd00:·746f·7269·6573·206f·7220·6869·6464·656e··tories·or·hidden | ||
| 0003fd10:· | 0003fd10:·2066·696c·6573·2077·696c·6c20·6265·2069···files·will·be·i | ||
| Max diff block lines reached; 1053107/1159119 bytes (90.85%) of diff not shown. | |||
| Offset 258, 14 lines modified | Offset 258, 142 lines modified | ||
| 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- | 258 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-007-3·R2.1,·CIP-007-3·R2.2,·CIP-007-3·R2.3,·CIP- |
| 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 259 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 260 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 261 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 | 262 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.5.1,·Req-10.5.2 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.3.2,·10.3 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 267 | if·dpkg-query·--show·--showformat='${db:Status-Status} | ||
| 268 | '·'linux-base'·2>/dev/null·|·grep·-q·^installed·&&·dpkg-query·--show·-- | ||
| 269 | showformat='${db:Status-Status}\n'·'rsyslog'·2>/dev/null·|·grep·- | ||
| 270 | q·'^installed';·then | ||
| 271 | #·List·of·log·file·paths·to·be·inspected·for·correct·permissions | ||
| 272 | #·*·Primarily·inspect·log·file·paths·listed·in·/etc/rsyslog.conf | ||
| 273 | RSYSLOG_ETC_CONFIG="/etc/rsyslog.conf" | ||
| 274 | #·*·And·also·the·log·file·paths·listed·after·rsyslog's·$IncludeConfig·directive | ||
| 275 | #···(store·the·result·into·array·for·the·case·there's·shell·glob·used·as·value | ||
| 276 | of·IncludeConfig) | ||
| 277 | readarray·-t·OLD_INC·<·<(grep·-e·"\$IncludeConfig[[:space:]]\+[^[:space:];]\+" | ||
| 278 | /etc/rsyslog.conf·|·cut·-d·'·'·-f·2) | ||
| 279 | readarray·-t·RSYSLOG_INCLUDE_CONFIG·<·<(for·INCPATH·in·"${OLD_INC[@]}";·do·eval | ||
| 280 | printf·'%s\\n'·"${INCPATH}";·done) | ||
| 281 | readarray·-t·NEW_INC·<·<(sed·-n·'/^\s*include(/,/)/Ip'·/etc/rsyslog.conf·|·sed | ||
| 282 | -n·'s@.*file\s*=\s*"\([/[:alnum:][:punct:]]*\)".*@\1@Ip') | ||
| 283 | readarray·-t·RSYSLOG_INCLUDE·<·<(for·INCPATH·in·"${NEW_INC[@]}";·do·eval·printf | ||
| 284 | '%s\\n'·"${INCPATH}";·done) | ||
| 285 | #·Declare·an·array·to·hold·the·final·list·of·different·log·file·paths | ||
| 286 | declare·-a·LOG_FILE_PATHS | ||
| 287 | #·Array·to·hold·all·rsyslog·config·entries | ||
| 288 | RSYSLOG_CONFIGS=() | ||
| 289 | RSYSLOG_CONFIGS=("${RSYSLOG_ETC_CONFIG}"·"${RSYSLOG_INCLUDE_CONFIG[@]}"·"$ | ||
| 290 | {RSYSLOG_INCLUDE[@]}") | ||
| 291 | #·Get·full·list·of·files·to·be·checked | ||
| 292 | #·RSYSLOG_CONFIGS·may·contain·globs·such·as | ||
| 293 | #·/etc/rsyslog.d/*.conf·/etc/rsyslog.d/*.frule | ||
| 294 | #·So,·loop·over·the·entries·in·RSYSLOG_CONFIGS·and·use·find·to·get·the·list·of | ||
| 295 | included·files. | ||
| 296 | RSYSLOG_CONFIG_FILES=() | ||
| 297 | for·ENTRY·in·"${RSYSLOG_CONFIGS[@]}" | ||
| 298 | do | ||
| 299 | » #·If·directory,·rsyslog·will·search·for·config·files·in·recursively. | ||
| 300 | » #·However,·files·in·hidden·sub-directories·or·hidden·files·will·be·ignored. | ||
| 301 | » if·[·-d·"${ENTRY}"·] | ||
| 302 | » then | ||
| 303 | » » readarray·-t·FINDOUT·<·<(find·"${ENTRY}"·-not·-path·'*/.*'·-type·f) | ||
| 304 | » » RSYSLOG_CONFIG_FILES+=("${FINDOUT[@]}") | ||
| 305 | » elif·[·-f·"${ENTRY}"·] | ||
| 306 | » then | ||
| 307 | » » RSYSLOG_CONFIG_FILES+=("${ENTRY}") | ||
| 308 | » else | ||
| 309 | » » echo·"Invalid·include·object:·${ENTRY}" | ||
| 310 | » fi | ||
| 311 | done | ||
| 312 | #·Browse·each·file·selected·above·as·containing·paths·of·log·files | ||
| 313 | #·('/etc/rsyslog.conf'·and·'/etc/rsyslog.d/*.conf'·in·the·default | ||
| 314 | configuration) | ||
| 315 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 316 | do | ||
| 317 | » #·From·each·of·these·files·extract·just·particular·log·file·path(s),·thus: | ||
| 318 | » #·*·Ignore·lines·starting·with·space·('·'),·comment·('#"),·or·variable·syntax | ||
| 319 | ('$')·characters, | ||
| 320 | » #·*·Ignore·empty·lines, | ||
| 321 | » #·*·Strip·quotes·and·closing·brackets·from·paths. | ||
| 322 | » #·*·Ignore·paths·that·match·/dev|/etc.*\.conf,·as·those·are·paths,·but·likely | ||
| 323 | not·log·files | ||
| 324 | » #·*·From·the·remaining·valid·rows·select·only·fields·constituting·a·log·file | ||
| 325 | path | ||
| 326 | » #·Text·file·column·is·understood·to·represent·a·log·file·path·if·and·only·if | ||
| 327 | all·of·the | ||
| 328 | » #·following·are·met: | ||
| 329 | » #·*·it·contains·at·least·one·slash·'/'·character, | ||
| 330 | » #·*·it·is·preceded·by·space | ||
| 331 | » #·*·it·doesn't·contain·space·('·'),·colon·(':'),·and·semicolon·(';') | ||
| 332 | characters | ||
| 333 | » #·Search·log·file·for·path(s)·only·in·case·it·exists! | ||
| 334 | » if·[[·-f·"${LOG_FILE}"·]] | ||
| 335 | » then | ||
| 336 | » » NORMALIZED_CONFIG_FILE_LINES=$(sed·-e·"/^[#|$]/d"·"${LOG_FILE}") | ||
| 337 | » » LINES_WITH_PATHS=$(grep·'[^/]*\s\+\S*/\S\+$'·<<<·"$ | ||
| 338 | {NORMALIZED_CONFIG_FILE_LINES}") | ||
| 339 | » » FILTERED_PATHS=$(awk·'{if(NF>=2&&($NF~/^\//||$NF~/^-\//)){sub(/^-\//,"/ | ||
| 340 | ",$NF);print·$NF}}'·<<<·"${LINES_WITH_PATHS}") | ||
| 341 | » » CLEANED_PATHS=$(sed·-e·"s/[\"')]//g;·/\\/etc.*\.conf/d;·/\\/dev\\//d"·<<<·"$ | ||
| 342 | {FILTERED_PATHS}") | ||
| 343 | » » MATCHED_ITEMS=$(sed·-e·"/^$/d"·<<<·"${CLEANED_PATHS}") | ||
| 344 | » » #·Since·above·sed·command·might·return·more·than·one·item·(delimited·by | ||
| 345 | newline),·split | ||
| 346 | » » #·the·particular·matches·entries·into·new·array·specific·for·this·log·file | ||
| 347 | » » readarray·-t·ARRAY_FOR_LOG_FILE·<<<·"$MATCHED_ITEMS" | ||
| 348 | » » #·Concatenate·the·two·arrays·-·previous·content·of·$LOG_FILE_PATHS·array·with | ||
| 349 | » » #·items·from·newly·created·array·for·this·log·file | ||
| 350 | » » LOG_FILE_PATHS+=("${ARRAY_FOR_LOG_FILE[@]}") | ||
| 351 | » » #·Delete·the·temporary·array | ||
| 352 | » » unset·ARRAY_FOR_LOG_FILE | ||
| 353 | » fi | ||
| 354 | done | ||
| 355 | #·Check·for·RainerScript·action·log·format·which·might·be·also·multiline·so | ||
| 356 | grep·regex·is·a·bit | ||
| 357 | #·curly: | ||
| 358 | #·extract·possibly·multiline·action·omfile·expressions | ||
| 359 | #·extract·File="logfile"·expression | ||
| 360 | #·match·only·"logfile"·expression | ||
| 361 | for·LOG_FILE·in·"${RSYSLOG_CONFIG_FILES[@]}" | ||
| 362 | do | ||
| 363 | » ACTION_OMFILE_LINES=$(grep·-iozP·"action\s*\(\s*type\s*=\s*\"omfile\"[^\)]*\)" | ||
| 364 | "${LOG_FILE}") | ||
| 365 | » OMFILE_LINES=$(echo·"${ACTION_OMFILE_LINES}"|·grep·-iaoP·"\bFile\s*=\s*\"([/[: | ||
| 366 | alnum:][:punct:]]*)\"\s*\)") | ||
| 367 | » LOG_FILE_PATHS+=("$(echo·"${OMFILE_LINES}"|·grep·-oE·"\"([/[:alnum:][:punct: | ||
| 368 | ]]*)\""|tr·-d·"\"")") | ||
| 369 | done | ||
| 370 | #·Ensure·the·correct·attribute·if·file·exists | ||
| 371 | FILE_CMD="chgrp" | ||
| 372 | for·LOG_FILE_PATH·in·"${LOG_FILE_PATHS[@]}" | ||
| 373 | do | ||
| 374 | » #·Sanity·check·-·if·particular·$LOG_FILE_PATH·is·empty·string,·skip·it·from | ||
| 375 | further·processing | ||
| 376 | » if·[·-z·"$LOG_FILE_PATH"·] | ||
| 377 | » then | ||
| Max diff block lines reached; 133816/139467 bytes (95.95%) of diff not shown. | |||
| Offset 3, 6259 lines modified | Offset 3, 5826 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_login_grace_time_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Ensure·SSH·LoginGraceTime·is·configured</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_login_grace_time_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-aide_build_database_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Build·and·Test·AIDE·Database</ocil:title> | ||
| 23 | ······<ocil:title>Verify·that·All·World-Writable·Directories·Have·Sticky·Bits·Set</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_sticky_bits_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_private_key_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> | ||
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-aide_build_database_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 17 | ······<ocil:title>Set·Default·iptables·Policy·for·Forwarded·Packets</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-set_iptables_default_rule_forward_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> | ||
| 41 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlink_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·unlink</ocil:title> | ||
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-audit | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_unlink_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_key_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 29 | ······<ocil:title>Specify·module·signing·key·to·use</ocil:title> |
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_key_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_no_uid_except_zero_ocil:questionnaire:1"> | ||
| 53 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmod_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmod</ocil:title> | ||
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmod_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_m | 40 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 41 | ······<ocil:title>Limit·the·Number·of·Concurrent·Login·Sessions·Allowed·Per·User</ocil:title> |
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_m | 43 | ········<ocil:test_action_ref>ocil:ssg-accounts_max_concurrent_login_sessions_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-auditd_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 47 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> |
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-auditd_ | 49 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_error_action_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_messages_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify· | 53 | ······<ocil:title>Verify·Permissions·on·/var/log/messages·File</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-file_ | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_group_ocil:questionnaire:1"> | ||
| 77 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-ss | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_creat_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 65 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·creat</ocil:title> |
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-ss | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_creat_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-di | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_privileged_commands_poweroff_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·poweroff</ocil:title> |
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-di | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_privileged_commands_poweroff_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_action_mail_acct_ocil:questionnaire:1"> | ||
| 95 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> | ||
| 101 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_minlen_login_defs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Set·Password·Minimum·Length·in·login.defs</ocil:title> | ||
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_minlen_login_defs_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 89 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_syslog_ocil:questionnaire:1"> | ||
| 113 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_writable_hooks_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·mutable·hooks</ocil:title> | ||
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_writable_hooks_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 101 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| Max diff block lines reached; 703583/715383 bytes (98.35%) of diff not shown. | |||
| Offset 3, 5961 lines modified | Offset 3, 5961 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-s | 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 11 | ······<ocil:title>Set·Default·iptables·Policy·for·Incoming·Packets</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-set_iptables_default_rule_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-set_iptables_default_rule_forward_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Set·Default·iptables·Policy·for·Forwarded·Packets</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-s | 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-timer_logrotate_enabled_ocil:questionnaire:1"> | ||
| 23 | ····· | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_rename_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·rename</ocil:title> | ||
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-t | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_rename_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_fortify_source_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Harden·common·str/mem·functions·against·buffer·overflows</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_ | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_fortify_source_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>All·GIDs·referenced·in·/etc/passwd·must·be·defined·in·/etc/group</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-gid_passwd_group_same_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-account_password | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_max_life_root_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Account· | 35 | ······<ocil:title>Set·Root·Account·Password·Maximum·Age</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-account_password | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_max_life_root_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-ss | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_sysrq_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 41 | ······<ocil:title>Disallow·magic·SysRq·key</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-ss | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_sysrq_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 53 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-auditd_audispd_syslog_plugin_activated_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Configure·auditd·to·use·audispd's·syslog·plugin</ocil:title> | ||
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-auditd_audispd_syslog_plugin_activated_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_yama_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Enable·Yama·support</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_ | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_yama_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_stackprotector_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Stack·Protector·buffer·overlow·detection</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_stackprotector_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Enable·different·security·models</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_core_bpf_jit_harden_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Harden·the·operation·of·the·BPF·just-in-time·compiler</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_core_bpf_jit_harden_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_sshd_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_private_key_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Verify·Owner·on·SSH·Server· | 83 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-file_owner_sshd_ | 85 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_iptables_enabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Verify·iptables·Enabled</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-service_iptables_enabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-file_ | 97 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_renameat_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_user_cfg_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Verify·/boot/grub/user.cfg·User·Ownership</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_user_cfg_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_modprobe_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify·Group·Who·Owns·group·File</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_profile_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·the·Default·Umask·is·Set·Correctly·in·/etc/profile</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_profile_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_unlinkat_ocil:questionnaire:1"> | ||
| 125 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-selinux_not_disabled_ocil:questionnaire:1"> |
| Max diff block lines reached; 1178170/1190578 bytes (98.96%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2025-03-01·08:08:00.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····181 | 2 | -rw-r--r--···0········0········0····18188·2025-03-01·08:08:00.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·370 | 3 | -rw-r--r--···0········0········0·37074944·2025-03-01·08:08:00.000000·data.tar.xz |
| Offset 15111, 213 lines modified | Offset 15111, 213 lines modified | ||
| 0003b060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b060:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b070:·2369·646d·3133·3339·2220·7461·6269·6e64··#idm1339"·tabind | 0003b070:·2369·646d·3133·3339·2220·7461·6269·6e64··#idm1339"·tabind | ||
| 0003b080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b080:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b090:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b0a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b0b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b0c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b0d0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b0d0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b0e0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b0f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b0e0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b0f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b100:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b110:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b120:·6964·6d31·3333·3922·3e3c·7461·626c·6520··idm1339"><table· | |||
| 0003b130:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b140:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b150:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b160:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b170:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b180:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b190:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b1a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b1b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b1c0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b1d0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b1e0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b1f0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b200:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b210:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b220:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b230:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b240:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b250:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b260:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b270:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b280:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b290:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b2a0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b2b0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b2c0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b2d0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b2e0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b2f0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b300:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b310:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b320:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b330:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b340:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b350:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b360:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b370:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b380:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b390:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003b3a0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b3b0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b3c0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b3d0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b3e0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b3f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b400:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b410:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b420:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b430:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b440:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b450:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b460:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b470:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b480:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b490:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b4a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b4b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b4c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b4d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b4e0:·6172·6765·743d·2223·6964·6d31·3334·3022··arget="#idm1340" | |||
| 0003b4f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b500:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b510:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b520:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b530:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b540:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b550:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b560:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b570:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b580:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b590:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b5a0:·2269·646d·3133·3430·223e·3c70·7265·3e3c··"idm1340"><pre>< | |||
| 0003b5b0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b5c0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b5d0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b5e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b5f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b600:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b610:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b620:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b630:·2223·6964·6d31·3334·3122·2074·6162·696e··"#idm1341"·tabin | |||
| 0003b640:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b650:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b660:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b670:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b680:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b690:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003b6a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b | 0003b100:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b | 0003b110:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b | 0003b120:·6170·7365·2220·6964·3d22·6964·6d31·3333··apse"·id="idm133 | ||
| 0003b130:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | |||
| 0003b140:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b150:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b160:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b6e0:·6d31·3334·3122·3e3c·7461·626c·6520·636c··m1341"><table·cl | |||
| 0003b6f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b700:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b710:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b720:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b730:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b740:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b750:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b760:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b770:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b780:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b790:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b7a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b7b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b7c0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b7d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | |||
| 0003b7e0:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| Max diff block lines reached; 21959974/21988016 bytes (99.87%) of diff not shown. | |||
| Offset 15077, 213 lines modified | Offset 15077, 213 lines modified | ||
| 0003ae40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ae40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ae50:·6964·6d31·3333·3922·2074·6162·696e·6465··idm1339"·tabinde | 0003ae50:·6964·6d31·3333·3922·2074·6162·696e·6465··idm1339"·tabinde | ||
| 0003ae60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ae60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ae70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ae70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ae80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ae80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ae90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ae90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003aea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003aea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003aeb0:·656d·6564·6961·7469·6f6e·204 | 0003aeb0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003aec0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003aed0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aee0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aef0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af00:·646d·3133·3339·223e·3c74·6162·6c65·2063··dm1339"><table·c | |||
| 0003af10:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003af20:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003af30:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003af40:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003af50:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003af60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a | 0003aec0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003aed0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003aee0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003aef0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af00:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003af10:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003af20:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003af30:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003af40:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003af50:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003af60:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003af70:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003af80:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003af90:·2d74·6172·6765·743d·2223·6964·6d31·3334··-target="#idm134 | |||
| 0003afa0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003afb0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003afc0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003afd0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003afe0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003aff0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b000:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b010:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b020:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b030:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b040:·7365·2220·6964·3d22·6964·6d31·3334·3022··se"·id="idm1340" | |||
| 0003b050:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b060:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b070:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b080:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b090:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003b0a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003 | 0003b0b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003afa0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003 | 0003b0c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b0d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003 | 0003b0e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003b0f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b100:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b110:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b120:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b130:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b140:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b150:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b160:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b170:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b180:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b190:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b1a0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003afe0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003aff0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b000:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b010:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b020:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b030:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b040:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b050:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b060:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b070:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b080:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b090:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b0a0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b0b0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b0c0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b0d0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b0e0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b0f0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b100:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b110:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b120:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b130:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b140:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b150:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b160:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b170:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b180:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b190:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b1a0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b1b0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b1c0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b1d0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b1e0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b1f0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b200:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b210:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b220:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b230:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b240:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b250:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b260:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b270:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b280:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b290:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2a0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b2b0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b2c0:·7267·6574·3d22·2369·646d·3133·3430·2220··rget="#idm1340"· | |||
| 0003b2d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b2e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b2f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b300:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b310:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b320:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b330:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b340:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b350:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b360:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b370:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b380:·6964·6d31·3334·3022·3e3c·7072·653e·3c63··idm1340"><pre><c | |||
| 0003b390:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| Max diff block lines reached; 9275084/9303126 bytes (99.70%) of diff not shown. | |||
| Offset 118, 14 lines modified | Offset 118, 53 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Gather·the·package·facts | 164 | -·name:·Gather·the·package·facts |
| 131 | ··package_facts: | 165 | ··package_facts: |
| Offset 154, 53 lines modified | Offset 193, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 193 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 194 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 195 | ··-·low_complexity |
| 157 | ··-·low_disruption | 196 | ··-·low_disruption |
| 158 | ··-·medium_severity | 197 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 198 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 199 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·rpm·--quiet·-q·kernel;·then | ||
| 172 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 173 | ····dnf·install·-y·"aide" | ||
| 174 | fi | ||
| 175 | else | ||
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 177 | fi | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | include·install_aide | ||
| 184 | class·install_aide·{ | ||
| 185 | ··package·{·'aide': | ||
| 186 | ····ensure·=>·'installed', | ||
| 187 | ··} | ||
| 188 | } | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | package·--add=aide | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 201 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 202 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 199 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 204 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 200 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 205 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 201 | newly-generated·database·can·be·installed·as·follows: | 206 | newly-generated·database·can·be·installed·as·follows: |
| Offset 549, 14 lines modified | Offset 549, 33 lines modified | ||
| 549 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 549 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 550 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 550 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 551 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 551 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 552 | ·····················FCS_TLSC_EXT.1 | 552 | ·····················FCS_TLSC_EXT.1 |
| 553 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 553 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 554 | ············_\x8c_\x8i_\x8s······1.9 | 554 | ············_\x8c_\x8i_\x8s······1.9 |
| 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | var_system_crypto_policy='DEFAULT' | ||
| 558 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 559 | rc=$? | ||
| 560 | if·test·"$rc"·=·127;·then | ||
| 561 | » echo·"$stderr_of_call"·>&2 | ||
| 562 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 563 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1002526/1007756 bytes (99.48%) of diff not shown. | |||
| Offset 15467, 133 lines modified | Offset 15467, 133 lines modified | ||
| 0003c6a0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | 0003c6a0:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | ||
| 0003c6b0:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | 0003c6b0:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | ||
| 0003c6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003c6c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003c6d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003c6e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003c6f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003c700:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c710:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003c720:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c730:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c740:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c750:·6170·7365·2220·6964·3d22·6964·6d31·3231··apse"·id="idm121 | |||
| 0003c760:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003c770:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003c780:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003c790:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003c7a0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003c7b0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003c7c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c7 | 0003c710:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003c720:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c730:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c740:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c750:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c760:·6964·3d22·6964·6d31·3231·3422·3e3c·7072··id="idm1214"><pr | |||
| 0003c770:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003c780:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003c790:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003c7a0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003c7b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c7c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c7d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c7e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c7f0:·6574·3d22·2369·646d·3132·3135·2220·7461··et="#idm1215"·ta | |||
| 0003c800:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c810:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c820:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c830:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c840:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c850:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c860:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003c870:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c880:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c890:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c8a0:·643d·2269·646d·3132·3135·223e·3c74·6162··d="idm1215"><tab | |||
| 0003c8b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c8c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c8d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c8e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c8f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c | 0003c900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c920:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c930:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c940:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c950:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c | 0003c960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c970:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c980:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c990:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c9a0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003c9b0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003c9c0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003c9d0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003c9e0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c9f0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003ca00:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003c800:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c810:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c820:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c830:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c840:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c850:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003c860:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003c870:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003c880:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003c890:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003c8a0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c8b0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003c8c0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c8d0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c8e0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c8f0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c900:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c910:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c920:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c930:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c940:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c950:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c960:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c970:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003c980:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003c990:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003c9a0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003c9b0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003c9c0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003c9d0:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003c9e0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003c9f0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003ca00:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003ca10:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003ca20:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003ca30:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003ca40:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003ca50:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003ca60:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003ca70:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003ca80:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003ca90:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003caa0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003cab0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003cac0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003cad0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003cae0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003caf0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003cb00:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003cb10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003cb20:·2223·6964·6d31·3231·3522·2074·6162·696e··"#idm1215"·tabin | |||
| 0003cb30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003cb40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003cb50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003cb60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003cb70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003cb80:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003cb90:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003cba0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003cbb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| Max diff block lines reached; 2707304/2724306 bytes (99.38%) of diff not shown. | |||
| Offset 160, 14 lines modified | Offset 160, 31 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | include·install_aide | ||
| 177 | class·install_aide·{ | ||
| 178 | ··package·{·'aide': | ||
| 179 | ····ensure·=>·'installed', | ||
| 180 | ··} | ||
| 181 | } | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | -·name:·Gather·the·package·facts | 187 | -·name:·Gather·the·package·facts |
| 173 | ··package_facts: | 188 | ··package_facts: |
| Offset 196, 31 lines modified | Offset 213, 14 lines modified | ||
| 196 | ··-·PCI-DSSv4-11.5.2 | 213 | ··-·PCI-DSSv4-11.5.2 |
| 197 | ··-·enable_strategy | 214 | ··-·enable_strategy |
| 198 | ··-·low_complexity | 215 | ··-·low_complexity |
| 199 | ··-·low_disruption | 216 | ··-·low_disruption |
| 200 | ··-·medium_severity | 217 | ··-·medium_severity |
| 201 | ··-·no_reboot_needed | 218 | ··-·no_reboot_needed |
| 202 | ··-·package_aide_installed | 219 | ··-·package_aide_installed |
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | [[packages]] | ||
| 205 | name·=·"aide" | ||
| 206 | version·=·"*" | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 219 | Run·the·following·command·to·generate·a·new·database: | 221 | Run·the·following·command·to·generate·a·new·database: |
| 220 | $·sudo·/usr/sbin/aide·--init | 222 | $·sudo·/usr/sbin/aide·--init |
| 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 223 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 222 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 224 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 223 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 225 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 224 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 226 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 556, 14 lines modified | Offset 556, 33 lines modified | ||
| 556 | ············_\x8i_\x8s_\x8m······1446 | 556 | ············_\x8i_\x8s_\x8m······1446 |
| 557 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 557 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 558 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 558 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 559 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 559 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 560 | ·····················FCS_TLSC_EXT.1 | 560 | ·····················FCS_TLSC_EXT.1 |
| 561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 562 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 564 | var_system_crypto_policy='DEFAULT' | ||
| 565 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 566 | rc=$? | ||
| 567 | if·test·"$rc"·=·127;·then | ||
| 568 | » echo·"$stderr_of_call"·>&2 | ||
| 569 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 570 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 571 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 572 | » false··#·end·with·an·error·code | ||
| 573 | elif·test·"$rc"·!=·0;·then | ||
| 574 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 575 | » false··#·end·with·an·error·code | ||
| 576 | fi | ||
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 568 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 582 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 569 | ··set_fact: | 583 | ··set_fact: |
| Offset 608, 33 lines modified | Offset 627, 14 lines modified | ||
| 608 | ··-·PCI-DSSv4-2.2.7 | 627 | ··-·PCI-DSSv4-2.2.7 |
| 609 | ··-·configure_crypto_policy | 628 | ··-·configure_crypto_policy |
| 610 | ··-·high_severity | 629 | ··-·high_severity |
| 611 | ··-·low_complexity | 630 | ··-·low_complexity |
| 612 | ··-·low_disruption | 631 | ··-·low_disruption |
| 613 | ··-·no_reboot_needed | 632 | ··-·no_reboot_needed |
| 614 | ··-·restrict_strategy | 633 | ··-·restrict_strategy |
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 616 | var_system_crypto_policy='DEFAULT' | ||
| 617 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 618 | rc=$? | ||
| 619 | if·test·"$rc"·=·127;·then | ||
| 620 | » echo·"$stderr_of_call"·>&2 | ||
| 621 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 622 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 623 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 624 | » false··#·end·with·an·error·code | ||
| 625 | elif·test·"$rc"·!=·0;·then | ||
| 626 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 627 | » false··#·end·with·an·error·code | ||
| 628 | fi | ||
| 629 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 634 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 630 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 635 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 631 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 636 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 315275/320671 bytes (98.32%) of diff not shown. | |||
| Offset 16285, 195 lines modified | Offset 16285, 195 lines modified | ||
| 0003f9c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003f9c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003f9d0:·646d·3134·3432·2220·7461·6269·6e64·6578··dm1442"·tabindex | 0003f9d0:·646d·3134·3432·2220·7461·6269·6e64·6578··dm1442"·tabindex | ||
| 0003f9e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003f9e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003f9f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003f9f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003fa00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003fa00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003fa10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003fa10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003fa20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003fa20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003fa30:·6d65·6469·6174·696f·6e20· | 0003fa30:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003fa40:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003fa50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003fa60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003fa70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003fa80:·6d31·3434·3222·3e3c·7461·626c·6520·636c··m1442"><table·cl | |||
| 0003fa90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003faa0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003fab0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003fac0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003fa | 0003fa40:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003fa50:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003fa60:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003fa70:·6c61·7073·6522·2069·643d·2269·646d·3134··lapse"·id="idm14 | |||
| 0003fa80:·3432·223e·3c70·7265·3e3c·636f·6465·3e23··42"><pre><code># | |||
| 0003fa90:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003faa0:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003fab0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003fac0:·6f72·6d73·0a69·6620·7270·6d20·2d2d·7175··orms.if·rpm·--qu | |||
| 0003fad0:·6965·7420·2d71·2062·696e·643b·2074·6865··iet·-q·bind;·the | |||
| 0003fae0:·6e0a·0a66·756e·6374·696f·6e20·7265·6d65··n..function·reme | |||
| 0003faf0:·6469·6174·655f·6269·6e64·5f63·7279·7074··diate_bind_crypt | |||
| 0003fb00:·6f5f·706f·6c69·6379·2829·207b·0a09·434f··o_policy()·{..CO | |||
| 0003fb10:·4e46·4947·5f46·494c·453d·222f·6574·632f··NFIG_FILE="/etc/ | |||
| 0003fb20:·6e61·6d65·642e·636f·6e66·220a·0969·6620··named.conf"..if· | |||
| 0003fb30:·7465·7374·202d·6620·2224·434f·4e46·4947··test·-f·"$CONFIG | |||
| 0003fb40:·5f46·494c·4522·3b20·7468·656e·0a09·0973··_FILE";·then...s | |||
| 0003fb50:·6564·202d·6920·2773·7c6f·7074·696f·6e73··ed·-i·'s|options | |||
| 0003fb60:·207b·7c26·616d·703b·5c6e·5c74·696e·636c···{|&\n\tincl | |||
| 0003fb70:·7564·6520·222f·6574·632f·6372·7970·746f··ude·"/etc/crypto | |||
| 0003fb80:·2d70·6f6c·6963·6965·732f·6261·636b·2d65··-policies/back-e | |||
| 0003fb90:·6e64·732f·6269·6e64·2e63·6f6e·6669·6722··nds/bind.config" | |||
| 0003fba0:·3b7c·2720·2224·434f·4e46·4947·5f46·494c··;|'·"$CONFIG_FIL | |||
| 0003fbb0:·4522·0a09·0972·6574·7572·6e20·300a·0965··E"...return·0..e | |||
| 0003fbc0:·6c73·650a·0909·6563·686f·2022·4162·6f72··lse...echo·"Abor | |||
| 0003fbd0:·7469·6e67·2072·656d·6564·6961·7469·6f6e··ting·remediation | |||
| 0003fbe0:·2061·7320·2724·434f·4e46·4947·5f46·494c···as·'$CONFIG_FIL | |||
| 0003fbf0:·4527·2077·6173·206e·6f74·2065·7665·6e20··E'·was·not·even· | |||
| 0003fc00:·666f·756e·642e·2220·2667·743b·2661·6d70··found."·>& | |||
| 0003fc10:·3b32·0a09·0972·6574·7572·6e20·310a·0966··;2...return·1..f | |||
| 0003fc20:·690a·7d0a·0a72·656d·6564·6961·7465·5f62··i.}..remediate_b | |||
| 0003fc30:·696e·645f·6372·7970·746f·5f70·6f6c·6963··ind_crypto_polic | |||
| 0003fc40:·790a·0a65·6c73·650a·2020·2020·2667·743b··y..else.····> | |||
| 0003fc50:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003fc60:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003fc70:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003fc80:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003fc90:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003fca0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003fcb0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003fcc0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003fcd0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003fce0:·743d·2223·6964·6d31·3434·3322·2074·6162··t="#idm1443"·tab | |||
| 0003fcf0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003fd00:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003fd10:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003fd20:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003fd30:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003fd40:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003fd50:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003fd60:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003fd70:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003fd80:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003fd90:·643d·2269·646d·3134·3433·223e·3c74·6162··d="idm1443"><tab | |||
| 0003fda0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003fdb0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003fdc0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003fdd0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003fde0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003fdf0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003fe00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003fe10:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003f | 0003fe20:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003faf0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003f | 0003fe30:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003fe40:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003f | 0003fe50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003fe60:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003fe70:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003fe80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003fe90:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003fea0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003fb20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003fb30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003fb40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003fb50:·6779·3a3c·2f74·683e·3c74·643e·636f·6e66··gy:</th><td>conf | |||
| 0003fb60:·6967·7572·653c·2f74·643e·3c2f·7472·3e3c··igure</td></tr>< | |||
| 0003fb70:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003fb80:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003fb90:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003fba0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003fbb0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003fbc0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003fbd0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003fbe0:·2d31·3228·3229·0a20·202d·204e·4953·542d··-12(2).··-·NIST- | |||
| 0003fbf0:·3830·302d·3533·2d53·432d·3132·2833·290a··800-53-SC-12(3). | |||
| 0003fc00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003fc10:·5343·2d31·330a·2020·2d20·636f·6e66·6967··SC-13.··-·config | |||
| 0003fc20:·7572·655f·6269·6e64·5f63·7279·7074·6f5f··ure_bind_crypto_ | |||
| 0003fc30:·706f·6c69·6379·0a20·202d·2063·6f6e·6669··policy.··-·confi | |||
| 0003fc40:·6775·7265·5f73·7472·6174·6567·790a·2020··gure_strategy.·· | |||
| 0003fc50:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | |||
| 0003fc60:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003fc70:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003fc80:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | |||
| 0003fc90:·6f6f·745f·6e65·6564·6564·0a0a·2d20·6e61··oot_needed..-·na | |||
| 0003fca0:·6d65·3a20·436f·6e66·6967·7572·6520·4249··me:·Configure·BI | |||
| 0003fcb0:·4e44·2074·6f20·7573·6520·5379·7374·656d··ND·to·use·System | |||
| 0003fcc0:·2043·7279·7074·6f20·506f·6c69·6379·202d···Crypto·Policy·- | |||
| 0003fcd0:·2043·6865·636b·2042·494e·4420·636f·6e66···Check·BIND·conf | |||
| 0003fce0:·6967·7572·6174·696f·6e20·6669·6c65·0a20··iguration·file.· | |||
| 0003fcf0:·2020·2065·7869·7374·730a·2020·616e·7369·····exists.··ansi | |||
| 0003fd00:·626c·652e·6275·696c·7469·6e2e·7374·6174··ble.builtin.stat | |||
| 0003fd10:·3a0a·2020·2020·7061·7468·3a20·2f65·7463··:.····path:·/etc | |||
| 0003fd20:·2f6e·616d·6564·2e63·6f6e·660a·2020·7265··/named.conf.··re | |||
| 0003fd30:·6769·7374·6572·3a20·6269·6e64·5f63·6f6e··gister:·bind_con | |||
| 0003fd40:·6669·675f·6669·6c65·0a20·2077·6865·6e3a··fig_file.··when: | |||
| 0003fd50:·2027·2262·696e·6422·2069·6e20·616e·7369···'"bind"·in·ansi | |||
| 0003f | 0003feb0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003f | 0003fec0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| Max diff block lines reached; 371196/396754 bytes (93.56%) of diff not shown. | |||
| Offset 343, 14 lines modified | Offset 343, 35 lines modified | ||
| 343 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 343 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 344 | Severity: ··high | 344 | Severity: ··high |
| 345 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy | 345 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy |
| 346 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 | 346 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 |
| 347 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 347 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 348 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 348 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 349 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 | 349 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 352 | if·rpm·--quiet·-q·bind;·then | ||
| 353 | function·remediate_bind_crypto_policy()·{ | ||
| 354 | » CONFIG_FILE="/etc/named.conf" | ||
| 355 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 356 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 357 | "$CONFIG_FILE" | ||
| 358 | » » return·0 | ||
| 359 | » else | ||
| 360 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 361 | » » return·1 | ||
| 362 | » fi | ||
| 363 | } | ||
| 364 | remediate_bind_crypto_policy | ||
| 365 | else | ||
| 366 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 367 | fi | ||
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 368 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 369 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 370 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 371 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 372 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 355 | -·name:·Gather·the·package·facts | 373 | -·name:·Gather·the·package·facts |
| 356 | ··package_facts: | 374 | ··package_facts: |
| Offset 417, 35 lines modified | Offset 438, 14 lines modified | ||
| 417 | ··-·NIST-800-53-SC-13 | 438 | ··-·NIST-800-53-SC-13 |
| 418 | ··-·configure_bind_crypto_policy | 439 | ··-·configure_bind_crypto_policy |
| 419 | ··-·configure_strategy | 440 | ··-·configure_strategy |
| 420 | ··-·high_severity | 441 | ··-·high_severity |
| 421 | ··-·low_complexity | 442 | ··-·low_complexity |
| 422 | ··-·low_disruption | 443 | ··-·low_disruption |
| 423 | ··-·no_reboot_needed | 444 | ··-·no_reboot_needed |
| 424 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 425 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 426 | if·rpm·--quiet·-q·bind;·then | ||
| 427 | function·remediate_bind_crypto_policy()·{ | ||
| 428 | » CONFIG_FILE="/etc/named.conf" | ||
| 429 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 430 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 431 | "$CONFIG_FILE" | ||
| 432 | » » return·0 | ||
| 433 | » else | ||
| 434 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 435 | » » return·1 | ||
| 436 | » fi | ||
| 437 | } | ||
| 438 | remediate_bind_crypto_policy | ||
| 439 | else | ||
| 440 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 441 | fi | ||
| 442 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 445 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 443 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT | 446 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT |
| 444 | policy,·run·the·following·command: | 447 | policy,·run·the·following·command: |
| 445 | $·sudo·update-crypto-policies·--set·DEFAULT | 448 | $·sudo·update-crypto-policies·--set·DEFAULT |
| 446 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. | 449 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. |
| 447 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to | 450 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to |
| 448 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case | 451 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case |
| Offset 478, 14 lines modified | Offset 478, 34 lines modified | ||
| 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 478 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 479 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 480 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 480 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 481 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 481 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 482 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 483 | ·····················GPOS-00174 | 483 | ·····················GPOS-00174 |
| 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 484 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 486 | var_system_crypto_policy='DEFAULT' | ||
| 487 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 488 | null) | ||
| 489 | rc=$? | ||
| 490 | if·test·"$rc"·=·127;·then | ||
| 491 | » echo·"$stderr_of_call"·>&2 | ||
| 492 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 493 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 494 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 495 | » false··#·end·with·an·error·code | ||
| 496 | elif·test·"$rc"·!=·0;·then | ||
| 497 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 498 | » false··#·end·with·an·error·code | ||
| 499 | fi | ||
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 490 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 505 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 491 | ··set_fact: | 506 | ··set_fact: |
| Offset 530, 34 lines modified | Offset 550, 14 lines modified | ||
| 530 | ··-·PCI-DSSv4-2.2.7 | 550 | ··-·PCI-DSSv4-2.2.7 |
| 531 | ··-·configure_crypto_policy | 551 | ··-·configure_crypto_policy |
| 532 | ··-·high_severity | 552 | ··-·high_severity |
| 533 | ··-·low_complexity | 553 | ··-·low_complexity |
| 534 | ··-·low_disruption | 554 | ··-·low_disruption |
| 535 | ··-·no_reboot_needed | 555 | ··-·no_reboot_needed |
| 536 | ··-·restrict_strategy | 556 | ··-·restrict_strategy |
| 537 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 538 | var_system_crypto_policy='DEFAULT' | ||
| 539 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 540 | null) | ||
| 541 | rc=$? | ||
| 542 | if·test·"$rc"·=·127;·then | ||
| 543 | » echo·"$stderr_of_call"·>&2 | ||
| 544 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 545 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 35177/40452 bytes (86.96%) of diff not shown. | |||
| Offset 15823, 134 lines modified | Offset 15823, 134 lines modified | ||
| 0003dce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dcf0:·6964·6d31·3330·3822·2074·6162·696e·6465··idm1308"·tabinde | 0003dcf0:·6964·6d31·3330·3822·2074·6162·696e·6465··idm1308"·tabinde | ||
| 0003dd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd50:·656d·6564·6961·7469·6f6e·204 | 0003dd50:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003dd60:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003dd70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003dd80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003dd90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003dda0:·646d·3133·3038·223e·3c74·6162·6c65·2063··dm1308"><table·c | |||
| 0003ddb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ddc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ddd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003dde0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ddf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003de00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003d | 0003dd60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003dd70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003dd80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003dd90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003dda0:·7073·6522·2069·643d·2269·646d·3133·3038··pse"·id="idm1308 | |||
| 0003ddb0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ddc0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ddd0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003dde0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ddf0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003de00:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003de10:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003de20:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003de30:·2d74·6172·6765·743d·2223·6964·6d31·3330··-target="#idm130 | |||
| 0003de40:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003de50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003de60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003de70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003de80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003de90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003dea0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003deb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003dec0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ded0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003dee0:·7365·2220·6964·3d22·6964·6d31·3330·3922··se"·id="idm1309" | |||
| 0003def0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003df00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003df10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003df20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003df30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003d | 0003df40:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003d | 0003df50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003df60:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003de40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003de50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003de60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003de70:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003de80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003de90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003dea0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003deb0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003dec0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003ded0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003dee0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003def0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003df00:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003df10:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003df20:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003df30:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003df40:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003df50:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003df60:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003df70:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003df80:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003df90:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003dfa0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003dfb0:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003dfc0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003dfd0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003dfe0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003dff0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003e000:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003e010:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003e020:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003e030:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003e040:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003e050:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003e060:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003e070:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003e080:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003e090:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003e0a0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003e0b0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003e0c0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003e0d0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003e0e0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003e0f0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003e100:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003e110:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003e120:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003e130:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003e140:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003e150:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003e160:·7267·6574·3d22·2369·646d·3133·3039·2220··rget="#idm1309"· | |||
| 0003e170:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003e180:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003e190:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003e1a0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003e1b0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003e1c0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003e1d0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003e1e0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003e1f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e200:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e210:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e220:·6964·6d31·3330·3922·3e3c·7072·653e·3c63··idm1309"><pre><c | |||
| 0003e230:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003e240:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003e250:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003e260:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003e270:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003e280:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003e290:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003e2a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003e2b0:·2369·646d·3133·3130·2220·7461·6269·6e64··#idm1310"·tabind | |||
| 0003e2c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003e2d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003e2e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| Max diff block lines reached; 2635805/2652945 bytes (99.35%) of diff not shown. | |||
| Offset 202, 14 lines modified | Offset 202, 31 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | [[packages]] | ||
| 211 | name·=·"aide" | ||
| 212 | version·=·"*" | ||
| 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 218 | include·install_aide | ||
| 219 | class·install_aide·{ | ||
| 220 | ··package·{·'aide': | ||
| 221 | ····ensure·=>·'installed', | ||
| 222 | ··} | ||
| 223 | } | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | -·name:·Gather·the·package·facts | 229 | -·name:·Gather·the·package·facts |
| 215 | ··package_facts: | 230 | ··package_facts: |
| Offset 238, 31 lines modified | Offset 255, 14 lines modified | ||
| 238 | ··-·PCI-DSSv4-11.5.2 | 255 | ··-·PCI-DSSv4-11.5.2 |
| 239 | ··-·enable_strategy | 256 | ··-·enable_strategy |
| 240 | ··-·low_complexity | 257 | ··-·low_complexity |
| 241 | ··-·low_disruption | 258 | ··-·low_disruption |
| 242 | ··-·medium_severity | 259 | ··-·medium_severity |
| 243 | ··-·no_reboot_needed | 260 | ··-·no_reboot_needed |
| 244 | ··-·package_aide_installed | 261 | ··-·package_aide_installed |
| 245 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 246 | [[packages]] | ||
| 247 | name·=·"aide" | ||
| 248 | version·=·"*" | ||
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 250 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 251 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 252 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 253 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 254 | include·install_aide | ||
| 255 | class·install_aide·{ | ||
| 256 | ··package·{·'aide': | ||
| 257 | ····ensure·=>·'installed', | ||
| 258 | ··} | ||
| 259 | } | ||
| 260 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 262 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 261 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 263 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 262 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 264 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 263 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 265 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 264 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 266 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 265 | crontab: | 267 | crontab: |
| 266 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 268 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 475, 14 lines modified | Offset 475, 33 lines modified | ||
| 475 | ············_\x8i_\x8s_\x8m······1446 | 475 | ············_\x8i_\x8s_\x8m······1446 |
| 476 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 476 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 477 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 477 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 479 | ·····················FCS_TLSC_EXT.1 | 479 | ·····················FCS_TLSC_EXT.1 |
| 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 480 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 481 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 481 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 483 | var_system_crypto_policy='DEFAULT' | ||
| 484 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 485 | rc=$? | ||
| 486 | if·test·"$rc"·=·127;·then | ||
| 487 | » echo·"$stderr_of_call"·>&2 | ||
| 488 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 489 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 490 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 491 | » false··#·end·with·an·error·code | ||
| 492 | elif·test·"$rc"·!=·0;·then | ||
| 493 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 494 | » false··#·end·with·an·error·code | ||
| 495 | fi | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 487 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 501 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 488 | ··set_fact: | 502 | ··set_fact: |
| Offset 527, 33 lines modified | Offset 546, 14 lines modified | ||
| 527 | ··-·PCI-DSSv4-2.2.7 | 546 | ··-·PCI-DSSv4-2.2.7 |
| 528 | ··-·configure_crypto_policy | 547 | ··-·configure_crypto_policy |
| 529 | ··-·high_severity | 548 | ··-·high_severity |
| 530 | ··-·low_complexity | 549 | ··-·low_complexity |
| 531 | ··-·low_disruption | 550 | ··-·low_disruption |
| 532 | ··-·no_reboot_needed | 551 | ··-·no_reboot_needed |
| 533 | ··-·restrict_strategy | 552 | ··-·restrict_strategy |
| 534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 535 | var_system_crypto_policy='DEFAULT' | ||
| 536 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 537 | rc=$? | ||
| 538 | if·test·"$rc"·=·127;·then | ||
| 539 | » echo·"$stderr_of_call"·>&2 | ||
| 540 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 541 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 542 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 543 | » false··#·end·with·an·error·code | ||
| 544 | elif·test·"$rc"·!=·0;·then | ||
| 545 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 546 | » false··#·end·with·an·error·code | ||
| 547 | fi | ||
| 548 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 553 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 549 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 554 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 550 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 555 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 295657/300975 bytes (98.23%) of diff not shown. | |||
| Offset 15755, 195 lines modified | Offset 15755, 195 lines modified | ||
| 0003d8a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003d8a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003d8b0:·3134·3530·2220·7461·6269·6e64·6578·3d22··1450"·tabindex=" | 0003d8b0:·3134·3530·2220·7461·6269·6e64·6578·3d22··1450"·tabindex=" | ||
| 0003d8c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003d8c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003d8d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003d8d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003d8e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003d8e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003d8f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003d8f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003d900:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003d900:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003d910:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003d920:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003d930:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003d940:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003d950:·7073·6522·2069·643d·2269·646d·3134·3530··pse"·id="idm1450 | |||
| 0003d960:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003d970:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003d980:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003d990:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003d9a0:·6d73·0a69·6620·7270·6d20·2d2d·7175·6965··ms.if·rpm·--quie | |||
| 0003d9b0:·7420·2d71·2062·696e·643b·2074·6865·6e0a··t·-q·bind;·then. | |||
| 0003d9c0:·0a66·756e·6374·696f·6e20·7265·6d65·6469··.function·remedi | |||
| 0003d910:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003d920:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003d930:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003d940:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003d950:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003d960:·3435·3022·3e3c·7461·626c·6520·636c·6173··450"><table·clas | |||
| 0003d970:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003d980:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003d990:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003d9a0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003d9b0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003d9c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003d9d0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003d9e0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003d9f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003da00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003da10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003da20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003da30:·3a3c·2f74·683e·3c74·643e·636f·6e66·6967··:</th><td>config | |||
| 0003da40:·7572·653c·2f74·643e·3c2f·7472·3e3c·2f74··ure</td></tr></t | |||
| 0003da50:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003da60:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003da70:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003da80:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003da90:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003daa0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003dab0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003dac0:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003dad0:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003dae0:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003daf0:·2d31·330a·2020·2d20·636f·6e66·6967·7572··-13.··-·configur | |||
| 0003d | 0003d9d0:·6174·655f·6269·6e64·5f63·7279·7074·6f5f··ate_bind_crypto_ | ||
| 0003db10:·6c69·6379·0a20·202d·2063·6f6e·6669·6775··licy.··-·configu | |||
| 0003db20:·7265·5f73·7472·6174·6567·790a·2020·2d20··re_strategy.··-· | |||
| 0003db30:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | |||
| 0003db40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003db50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003db60:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | |||
| 0003db70:·745f·6e65·6564·6564·0a0a·2d20·6e61·6d65··t_needed..-·name | |||
| 0003db80:·3a20·436f·6e66·6967·7572·6520·4249·4e44··:·Configure·BIND | |||
| 0003db90:·2074·6f20·7573·6520·5379·7374·656d·2043···to·use·System·C | |||
| 0003dba0:·7279·7074·6f20·506f·6c69·6379·202d·2043··rypto·Policy·-·C | |||
| 0003dbb0:·6865·636b·2042·494e·4420·636f·6e66·6967··heck·BIND·config | |||
| 0003dbc0:·7572·6174·696f·6e20·6669·6c65·0a20·2020··uration·file.··· | |||
| 0003dbd0:·2065·7869·7374·730a·2020·616e·7369·626c···exists.··ansibl | |||
| 0003dbe0:·652e·6275·696c·7469·6e2e·7374·6174·3a0a··e.builtin.stat:. | |||
| 0003dbf0:·2020·2020·7061·7468·3a20·2f65·7463·2f6e······path:·/etc/n | |||
| 0003dc00:·616d·6564·2e63·6f6e·660a·2020·7265·6769··amed.conf.··regi | |||
| 0003dc10:·7374·6572·3a20·6269·6e64·5f63·6f6e·6669··ster:·bind_confi | |||
| 0003dc20:·675f·6669·6c65·0a20·2077·6865·6e3a·2027··g_file.··when:·' | |||
| 0003d | 0003d9e0:·706f·6c69·6379·2829·207b·0a09·434f·4e46··policy()·{..CONF | ||
| 0003d9f0:·4947·5f46·494c·453d·222f·6574·632f·6e61··IG_FILE="/etc/na | |||
| 0003da00:·6d65·642e·636f·6e66·220a·0969·6620·7465··med.conf"..if·te | |||
| 0003da10:·7374·202d·6620·2224·434f·4e46·4947·5f46··st·-f·"$CONFIG_F | |||
| 0003da20:·494c·4522·3b20·7468·656e·0a09·0973·6564··ILE";·then...sed | |||
| 0003da30:·202d·6920·2773·7c6f·7074·696f·6e73·207b···-i·'s|options·{ | |||
| 0003da40:·7c26·616d·703b·5c6e·5c74·696e·636c·7564··|&\n\tinclud | |||
| 0003da50:·6520·222f·6574·632f·6372·7970·746f·2d70··e·"/etc/crypto-p | |||
| 0003da60:·6f6c·6963·6965·732f·6261·636b·2d65·6e64··olicies/back-end | |||
| 0003da70:·732f·6269·6e64·2e63·6f6e·6669·6722·3b7c··s/bind.config";| | |||
| 0003da80:·2720·2224·434f·4e46·4947·5f46·494c·4522··'·"$CONFIG_FILE" | |||
| 0003da90:·0a09·0972·6574·7572·6e20·300a·0965·6c73··...return·0..els | |||
| 0003daa0:·650a·0909·6563·686f·2022·4162·6f72·7469··e...echo·"Aborti | |||
| 0003dab0:·6e67·2072·656d·6564·6961·7469·6f6e·2061··ng·remediation·a | |||
| 0003dac0:·7320·2724·434f·4e46·4947·5f46·494c·4527··s·'$CONFIG_FILE' | |||
| 0003dad0:·2077·6173·206e·6f74·2065·7665·6e20·666f···was·not·even·fo | |||
| 0003dae0:·756e·642e·2220·2667·743b·2661·6d70·3b32··und."·>&2 | |||
| 0003daf0:·0a09·0972·6574·7572·6e20·310a·0966·690a··...return·1..fi. | |||
| 0003db00:·7d0a·0a72·656d·6564·6961·7465·5f62·696e··}..remediate_bin | |||
| 0003db10:·645f·6372·7970·746f·5f70·6f6c·6963·790a··d_crypto_policy. | |||
| 0003db20:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003db30:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003db40:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003db50:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003db60:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003db70:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003db80:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003db90:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003dba0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003dbb0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003dbc0:·2223·6964·6d31·3435·3122·2074·6162·696e··"#idm1451"·tabin | |||
| 0003dbd0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003dbe0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003dbf0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003dc00:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003dc10:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003dc20:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003dc30:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003dc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003dc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003dc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003dc70:·2269·646d·3134·3531·223e·3c74·6162·6c65··"idm1451"><table | |||
| 0003dc80:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003dc90:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003dca0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003dcb0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003dcc0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003dcd0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003dce0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003dcf0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003dd00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003dd10:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003dd20:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003dd30:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003dd40:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003dd50:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003dd60:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003dd70:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| Max diff block lines reached; 328979/354537 bytes (92.79%) of diff not shown. | |||
| Offset 208, 14 lines modified | Offset 208, 35 lines modified | ||
| 208 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. | 208 | ············violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 209 | Severity: ··high | 209 | Severity: ··high |
| 210 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy | 210 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_bind_crypto_policy |
| 211 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 | 211 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002418,·CCI-002422 |
| 212 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) | 213 | ············_\x8n_\x8i_\x8s_\x8t·····SC-13,·SC-12(2),·SC-12(3) |
| 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 | 214 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000423-GPOS-00187,·SRG-OS-000426-GPOS-00190 |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·rpm·--quiet·-q·bind;·then | ||
| 218 | function·remediate_bind_crypto_policy()·{ | ||
| 219 | » CONFIG_FILE="/etc/named.conf" | ||
| 220 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 221 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 222 | "$CONFIG_FILE" | ||
| 223 | » » return·0 | ||
| 224 | » else | ||
| 225 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 226 | » » return·1 | ||
| 227 | » fi | ||
| 228 | } | ||
| 229 | remediate_bind_crypto_policy | ||
| 230 | else | ||
| 231 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 232 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 220 | -·name:·Gather·the·package·facts | 238 | -·name:·Gather·the·package·facts |
| 221 | ··package_facts: | 239 | ··package_facts: |
| Offset 282, 35 lines modified | Offset 303, 14 lines modified | ||
| 282 | ··-·NIST-800-53-SC-13 | 303 | ··-·NIST-800-53-SC-13 |
| 283 | ··-·configure_bind_crypto_policy | 304 | ··-·configure_bind_crypto_policy |
| 284 | ··-·configure_strategy | 305 | ··-·configure_strategy |
| 285 | ··-·high_severity | 306 | ··-·high_severity |
| 286 | ··-·low_complexity | 307 | ··-·low_complexity |
| 287 | ··-·low_disruption | 308 | ··-·low_disruption |
| 288 | ··-·no_reboot_needed | 309 | ··-·no_reboot_needed |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·rpm·--quiet·-q·bind;·then | ||
| 292 | function·remediate_bind_crypto_policy()·{ | ||
| 293 | » CONFIG_FILE="/etc/named.conf" | ||
| 294 | » if·test·-f·"$CONFIG_FILE";·then | ||
| 295 | » » sed·-i·'s|options·{|&\n\tinclude·"/etc/crypto-policies/back-ends/bind.config";|' | ||
| 296 | "$CONFIG_FILE" | ||
| 297 | » » return·0 | ||
| 298 | » else | ||
| 299 | » » echo·"Aborting·remediation·as·'$CONFIG_FILE'·was·not·even·found."·>&2 | ||
| 300 | » » return·1 | ||
| 301 | » fi | ||
| 302 | } | ||
| 303 | remediate_bind_crypto_policy | ||
| 304 | else | ||
| 305 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 306 | fi | ||
| 307 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 308 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT | 311 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·DEFAULT |
| 309 | policy,·run·the·following·command: | 312 | policy,·run·the·following·command: |
| 310 | $·sudo·update-crypto-policies·--set·DEFAULT | 313 | $·sudo·update-crypto-policies·--set·DEFAULT |
| 311 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. | 314 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected. |
| 312 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to | 315 | Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to |
| 313 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case | 316 | correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case |
| Offset 343, 14 lines modified | Offset 343, 34 lines modified | ||
| 343 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 343 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 344 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 344 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 345 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, | 345 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1, |
| 346 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 | 346 | ·····················FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 347 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- | 347 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394- |
| 348 | ·····················GPOS-00174 | 348 | ·····················GPOS-00174 |
| 349 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 349 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | var_system_crypto_policy='DEFAULT' | ||
| 352 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 353 | null) | ||
| 354 | rc=$? | ||
| 355 | if·test·"$rc"·=·127;·then | ||
| 356 | » echo·"$stderr_of_call"·>&2 | ||
| 357 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 358 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 359 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 360 | » false··#·end·with·an·error·code | ||
| 361 | elif·test·"$rc"·!=·0;·then | ||
| 362 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 363 | » false··#·end·with·an·error·code | ||
| 364 | fi | ||
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 355 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 370 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 356 | ··set_fact: | 371 | ··set_fact: |
| Offset 395, 34 lines modified | Offset 415, 14 lines modified | ||
| 395 | ··-·PCI-DSSv4-2.2.7 | 415 | ··-·PCI-DSSv4-2.2.7 |
| 396 | ··-·configure_crypto_policy | 416 | ··-·configure_crypto_policy |
| 397 | ··-·high_severity | 417 | ··-·high_severity |
| 398 | ··-·low_complexity | 418 | ··-·low_complexity |
| 399 | ··-·low_disruption | 419 | ··-·low_disruption |
| 400 | ··-·no_reboot_needed | 420 | ··-·no_reboot_needed |
| 401 | ··-·restrict_strategy | 421 | ··-·restrict_strategy |
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 403 | var_system_crypto_policy='DEFAULT' | ||
| 404 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/ | ||
| 405 | null) | ||
| 406 | rc=$? | ||
| 407 | if·test·"$rc"·=·127;·then | ||
| 408 | » echo·"$stderr_of_call"·>&2 | ||
| 409 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 410 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 29575/34850 bytes (84.86%) of diff not shown. | |||
| Offset 15111, 213 lines modified | Offset 15111, 213 lines modified | ||
| 0003b060:·2d74·6172·6765·743d·2223·6964·6d33·3138··-target="#idm318 | 0003b060:·2d74·6172·6765·743d·2223·6964·6d33·3138··-target="#idm318 | ||
| 0003b070:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003b070:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b080:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b090:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b0a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b0b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b0c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b0d0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b0e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b0f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b100:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b110:·7073·6522·2069·643d·2269·646d·3331·3837··pse"·id="idm3187 | |||
| 0003b120:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b130:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b140:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b150:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b160:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b170:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b180:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b | 0003b0d0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b0e0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b0f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b100:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b110:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b120:·643d·2269·646d·3331·3837·223e·3c70·7265··d="idm3187"><pre | |||
| 0003b130:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b140:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b150:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b160:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b170:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b180:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b190:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b1a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b1b0:·743d·2223·6964·6d33·3138·3822·2074·6162··t="#idm3188"·tab | |||
| 0003b1c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b1d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b1e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b1f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b200:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b210:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b220:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b230:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b240:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b250:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b260:·3d22·6964·6d33·3138·3822·3e3c·7461·626c··="idm3188"><tabl | |||
| 0003b270:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b280:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b290:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b2a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b2b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b2c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b2d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b2e0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b2f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b300:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b310:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b320:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b330:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b340:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b350:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b360:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b370:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b380:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b390:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b3a0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b3b0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b3c0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b200:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b210:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b220:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b230:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b240:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b250:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b260:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b270:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b280:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b290:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b2a0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b2b0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b2c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b2d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b2e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b2f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b300:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b310:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b320:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b330:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b340:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b350:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b360:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b370:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b380:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b390:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b3a0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b3b0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b3c0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b3d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b3e0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b3f0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b400:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b410:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b420:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b430:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b440:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b450:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b460:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b470:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b480:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b490:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b4a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b4b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b4c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b4d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b4e0:·2369·646d·3331·3838·2220·7461·6269·6e64··#idm3188"·tabind | |||
| 0003b4f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b500:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b510:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b520:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b530:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b540:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b550:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b560:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b570:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b580:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b590:·6170·7365·2220·6964·3d22·6964·6d33·3138··apse"·id="idm318 | |||
| 0003b5a0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 0003b5b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| Max diff block lines reached; 22203756/22231798 bytes (99.87%) of diff not shown. | |||
| Offset 15073, 213 lines modified | Offset 15073, 213 lines modified | ||
| 0003ae00:·6574·3d22·2369·646d·3331·3837·2220·7461··et="#idm3187"·ta | 0003ae00:·6574·3d22·2369·646d·3331·3837·2220·7461··et="#idm3187"·ta | ||
| 0003ae10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003ae10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003ae20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003ae20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003ae30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003ae30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003ae40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003ae40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003ae50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003ae50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003ae60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003ae60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003ae70:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003ae80:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae90:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003aea0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aeb0:·6964·3d22·6964·6d33·3138·3722·3e3c·7461··id="idm3187"><ta | |||
| 0003aec0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aed0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aee0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003aef0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af00:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003af10:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003af20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a | 0003ae70:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003ae80:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae90:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aea0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aeb0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aec0:·6d33·3138·3722·3e3c·7072·653e·3c63·6f64··m3187"><pre><cod | |||
| 0003aed0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003aee0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003aef0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003af00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003af10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003af20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003af30:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003af40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003af50:·646d·3331·3838·2220·7461·6269·6e64·6578··dm3188"·tabindex | |||
| 0003af60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003af70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003af80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003af90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003afa0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003afb0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003afc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003afd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003afe0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003aff0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b000:·3331·3838·223e·3c74·6162·6c65·2063·6c61··3188"><table·cla | |||
| 0003b010:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b020:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b030:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b040:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b050:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003 | 0003b060:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003af50:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003 | 0003b070:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b080:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003 | 0003b090:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b0a0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b0b0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b0c0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b0d0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b0e0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b0f0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b100:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b110:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b120:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b130:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b140:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b150:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003af80:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003af90:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003afa0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003afb0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003afc0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003afd0:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003afe0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003aff0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b000:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b010:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b020:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b030:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b040:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b050:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b060:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b070:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b080:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b090:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b0a0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b0b0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b0c0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b0d0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b0e0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b0f0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b100:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b110:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b120:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b130:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b140:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b150:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b160:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b170:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b180:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b190:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b1a0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b1b0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b1c0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1d0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1e0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1f0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b200:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b210:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b220:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b230:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b240:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b250:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b260:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b270:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | |||
| 0003b280:·3138·3822·2074·6162·696e·6465·783d·2230··188"·tabindex="0 | |||
| 0003b290:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b2a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b2b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b2c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b2d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b2e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b2f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b300:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b310:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b320:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b330:·2069·643d·2269·646d·3331·3838·223e·3c70···id="idm3188"><p | |||
| Max diff block lines reached; 9537951/9565993 bytes (99.71%) of diff not shown. | |||
| Offset 113, 14 lines modified | Offset 113, 53 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8c_\x8i_\x8s············6.1.1 | 118 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | include·install_aide | ||
| 130 | class·install_aide·{ | ||
| 131 | ··package·{·'aide': | ||
| 132 | ····ensure·=>·'installed', | ||
| 133 | ··} | ||
| 134 | } | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·rpm·--quiet·-q·kernel;·then | ||
| 142 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 143 | ····dnf·install·-y·"aide" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Gather·the·package·facts | 159 | -·name:·Gather·the·package·facts |
| 126 | ··package_facts: | 160 | ··package_facts: |
| Offset 149, 53 lines modified | Offset 188, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 190 | ··-·low_complexity |
| 152 | ··-·low_disruption | 191 | ··-·low_disruption |
| 153 | ··-·medium_severity | 192 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····dnf·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | include·install_aide | ||
| 179 | class·install_aide·{ | ||
| 180 | ··package·{·'aide': | ||
| 181 | ····ensure·=>·'installed', | ||
| 182 | ··} | ||
| 183 | } | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·--add=aide | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration |
| 194 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only | 199 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only |
| 195 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 535, 14 lines modified | Offset 535, 33 lines modified | ||
| 535 | ············_\x8i_\x8s_\x8m······1446 | 535 | ············_\x8i_\x8s_\x8m······1446 |
| 536 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 536 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 537 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 537 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 538 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 538 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 539 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 539 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 540 | ············_\x8c_\x8i_\x8s······1.6.1 | 540 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 541 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 541 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 543 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 544 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 545 | rc=$? | ||
| 546 | if·test·"$rc"·=·127;·then | ||
| 547 | » echo·"$stderr_of_call"·>&2 | ||
| 548 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 549 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1062071/1067386 bytes (99.50%) of diff not shown. | |||
| Offset 15064, 213 lines modified | Offset 15064, 213 lines modified | ||
| 0003ad70:·612d·7461·7267·6574·3d22·2369·646d·3331··a-target="#idm31 | 0003ad70:·612d·7461·7267·6574·3d22·2369·646d·3331··a-target="#idm31 | ||
| 0003ad80:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | 0003ad80:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | ||
| 0003ad90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ada0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ada0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003adb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003adb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003adc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003adc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003add0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003add0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ade0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003adf0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ae00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ae10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ae20:·6170·7365·2220·6964·3d22·6964·6d33·3138··apse"·id="idm318 | |||
| 0003ae30:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003ae40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae60:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae70:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae80:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ae90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a | 0003ade0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003adf0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003ae00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ae30:·6964·3d22·6964·6d33·3138·3722·3e3c·7072··id="idm3187"><pr | |||
| 0003ae40:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003ae50:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ae60:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ae70:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003ae80:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ae90:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003aea0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003aeb0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003aec0:·6574·3d22·2369·646d·3331·3838·2220·7461··et="#idm3188"·ta | |||
| 0003aed0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003aee0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003aef0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003af00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003af10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003af20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003af30:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003af40:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af50:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af60:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003af70:·643d·2269·646d·3331·3838·223e·3c74·6162··d="idm3188"><tab | |||
| 0003af80:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003af90:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003afa0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003afb0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003afc0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a | 0003afd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003a | 0003afe0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003aed0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003aee0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a | 0003aff0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b000:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b010:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003 | 0003b020:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b030:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b040:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b050:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b060:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b070:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b080:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b090:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b0a0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b0b0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b0c0:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b0d0:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003af10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003af20:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003af30:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003af40:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003af50:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003af60:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003af70:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003af80:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003af90:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003afa0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003afb0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003afc0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003afd0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003afe0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003aff0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b000:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b010:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b020:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b030:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b040:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b050:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b060:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b070:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b080:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b090:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b0a0:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b0b0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b0c0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b0d0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b0e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b0f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b100:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b110:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b120:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b130:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b140:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b150:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b160:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b170:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b180:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b190:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b1a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b1b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b1c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b1d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b1e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b1f0:·2223·6964·6d33·3138·3822·2074·6162·696e··"#idm3188"·tabin | |||
| 0003b200:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b210:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b220:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b230:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b240:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b250:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b260:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b270:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b280:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b290:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2a0:·6c61·7073·6522·2069·643d·2269·646d·3331··lapse"·id="idm31 | |||
| Max diff block lines reached; 9294753/9322795 bytes (99.70%) of diff not shown. | |||
| Offset 112, 14 lines modified | Offset 112, 53 lines modified | ||
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8c_\x8i_\x8s············6.1.1 | 117 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"aide" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | include·install_aide | ||
| 129 | class·install_aide·{ | ||
| 130 | ··package·{·'aide': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·rpm·--quiet·-q·kernel;·then | ||
| 141 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 142 | ····dnf·install·-y·"aide" | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·--add=aide | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 159 | ··package_facts: |
| Offset 148, 53 lines modified | Offset 187, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 187 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 188 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 189 | ··-·low_complexity |
| 151 | ··-·low_disruption | 190 | ··-·low_disruption |
| 152 | ··-·medium_severity | 191 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 192 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 193 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·rpm·--quiet·-q·kernel;·then | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 167 | ····dnf·install·-y·"aide" | ||
| 168 | fi | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_aide | ||
| 178 | class·install_aide·{ | ||
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration |
| 193 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only | 198 | file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only |
| 194 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 534, 14 lines modified | Offset 534, 33 lines modified | ||
| 534 | ············_\x8i_\x8s_\x8m······1446 | 534 | ············_\x8i_\x8s_\x8m······1446 |
| 535 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 535 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 536 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 536 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 537 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 537 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 538 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 538 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 539 | ············_\x8c_\x8i_\x8s······1.6.1 | 539 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 540 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 540 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 542 | var_system_crypto_policy='DEFAULT:NO-SHA1' | ||
| 543 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 544 | rc=$? | ||
| 545 | if·test·"$rc"·=·127;·then | ||
| 546 | » echo·"$stderr_of_call"·>&2 | ||
| 547 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 548 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1034577/1039892 bytes (99.49%) of diff not shown. | |||
| Offset 15103, 213 lines modified | Offset 15103, 213 lines modified | ||
| 0003afe0:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | 0003afe0:·7461·2d74·6172·6765·743d·2223·6964·6d33··ta-target="#idm3 | ||
| 0003aff0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003aff0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b000:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b000:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b010:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b010:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b020:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b020:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b030:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b030:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b040:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b040:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b050:·6961·7469·6f6e·204 | 0003b050:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b060:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b060:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b070:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b080:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b090:·6c61·7073·6522·2069·643d·2269·646d·3331··lapse"·id="idm31 | |||
| 0003b0a0:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | |||
| 0003b0b0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b0c0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b0d0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b0e0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b0f0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b100:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b110:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b120:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b130:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b140:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b150:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b160:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b170:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b180:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b190:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b1a0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003b1b0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003b1c0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003b1d0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003b1e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b1f0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b200:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b210:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b220:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b230:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b240:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b250:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b260:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b270:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b280:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b290:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b2a0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b2b0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b2c0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b2d0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b2e0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b2f0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b300:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b310:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003b320:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b330:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b340:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b350:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b360:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b370:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b380:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b390:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b3a0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3b0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3c0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3d0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3e0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b3f0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b400:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b410:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b420:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b430:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b440:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b460:·3d22·2369·646d·3331·3838·2220·7461·6269··="#idm3188"·tabi | |||
| 0003b470:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b480:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b490:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b4a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b4b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b4c0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b4d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b4e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b4f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b500:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b510:·6c6c·6170·7365·2220·6964·3d22·6964·6d33··llapse"·id="idm3 | |||
| 0003b520:·3138·3822·3e3c·7072·653e·3c63·6f64·653e··188"><pre><code> | |||
| 0003b530:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b540:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b550:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b560:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b570:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b580:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b590:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b5a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b5b0:·3331·3839·2220·7461·6269·6e64·6578·3d22··3189"·tabindex=" | |||
| 0003b5c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b5d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b5e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b5f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b600:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b610:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | |||
| 0003b | 0003b070:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b080:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b090:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b0a0:·2069·643d·2269·646d·3331·3837·223e·3c70···id="idm3187"><p | |||
| 0003b0b0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b0c0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b0d0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b650:·7073·6522·2069·643d·2269·646d·3331·3839··pse"·id="idm3189 | |||
| 0003b660:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b670:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b680:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b690:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b6a0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b6b0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b6c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b6d0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b6e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b6f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b700:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b710:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b720:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b730:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b740:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b750:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | |||
| 0003b760:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | |||
| 0003b770:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | |||
| Max diff block lines reached; 22033629/22061671 bytes (99.87%) of diff not shown. | |||
| Offset 16002, 176 lines modified | Offset 16002, 176 lines modified | ||
| 0003e810:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003e810:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003e820:·743d·2223·6964·6d33·3436·3622·2074·6162··t="#idm3466"·tab | 0003e820:·743d·2223·6964·6d33·3436·3622·2074·6162··t="#idm3466"·tab | ||
| 0003e830:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003e830:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003e840:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003e840:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003e850:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003e850:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003e860:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003e860:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003e870:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003e870:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003e880:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003e880:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003e890:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003e8a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003e8b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003e8c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003e8d0:·6964·6d33·3436·3622·3e3c·7072·653e·3c63··idm3466"><pre><c | |||
| 0003e8e0:·6f64·653e·0a76·6172·5f73·7973·7465·6d5f··ode>.var_system_ | |||
| 0003e8f0:·6372·7970·746f·5f70·6f6c·6963·793d·273c··crypto_policy='< | |||
| 0003e900:·6162·6272·2074·6974·6c65·3d22·6672·6f6d··abbr·title="from | |||
| 0003e910:·2050·726f·6669·6c65·2f72·6566·696e·652d···Profile/refine- | |||
| 0003e920:·7661·6c75·653a·2078·6363·6466·5f6f·7267··value:·xccdf_org | |||
| 0003e930:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | |||
| 0003e940:·656e·745f·7661·6c75·655f·7661·725f·7379··ent_value_var_sy | |||
| 0003e890:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003e8a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003e8b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003e8c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003e8d0:·643d·2269·646d·3334·3636·223e·3c74·6162··d="idm3466"><tab | |||
| 0003e8e0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003e8f0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003e900:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003e910:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003e920:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003e930:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003e940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003e950:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e960:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e970:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e980:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e990:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e9a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003e9b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003e9c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003e9d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003e9e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003e9 | 0003e950:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003ea00:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | |||
| 0003ea10:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | |||
| 0003e | 0003e960:·6379·223e·4649·5053·3c2f·6162·6272·3e27··cy">FIPS</abbr>' | ||
| 0003e970:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003e980:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003e990:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003e9a0:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | |||
| 0003e9b0:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003e9c0:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003e9d0:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003e9e0:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003e9f0:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003ea00:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003ea10:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003ea20:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003ea30:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003ea40:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003ea50:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003ea60:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003ea70:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003ea80:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003ea90:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003eaa0:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | |||
| 0003eab0:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003eac0:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003ead0:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003eae0:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003eaf0:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003eb00:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003eb10:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003eb20:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| 0003eb30:·3b20·7468·656e·0a09·6563·686f·2022·4572··;·then..echo·"Er | |||
| 0003eb40:·726f·7220·696e·766f·6b69·6e67·2074·6865··ror·invoking·the | |||
| 0003eb50:·2075·7064·6174·652d·6372·7970·746f·2d70···update-crypto-p | |||
| 0003eb60:·6f6c·6963·6965·7320·7363·7269·7074·3a20··olicies·script:· | |||
| 0003eb70:·2473·7464·6572·725f·6f66·5f63·616c·6c22··$stderr_of_call" | |||
| 0003eb80:·2026·6774·3b26·616d·703b·320a·0966·616c···>&2..fal | |||
| 0003eb90:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003eba0:·6e20·6572·726f·7220·636f·6465·0a66·690a··n·error·code.fi. | |||
| 0003ebb0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ebc0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ebd0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ebe0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ebf0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ec00:·3d22·2369·646d·3334·3638·2220·7461·6269··="#idm3468"·tabi | |||
| 0003ec10:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ec20:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ec30:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ec40:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ec50:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ec60:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003ec70:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ec80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ec90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003eca0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ecb0:·3d22·6964·6d33·3436·3822·3e3c·7461·626c··="idm3468"><tabl | |||
| 0003ecc0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ecd0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ece0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ecf0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ed00:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ed10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ed20:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ed30:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ed40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ed50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ed60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ed70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ed80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ed90:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003eda0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003edb0:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | |||
| 0003edc0:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | |||
| 0003e | 0003edd0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003ede0:·7920·2320·7072·6f6d·6f74·6520·746f·2076··y·#·promote·to·v | |||
| 0003edf0:·6172·6961·626c·650a·2020·7365·745f·6661··ariable.··set_fa | |||
| 0003ea40:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | |||
| 0003ea50:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | |||
| 0003ea60:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | |||
| 0003ea70:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | |||
| 0003ea80:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | |||
| 0003ea90:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | |||
| 0003eaa0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | |||
| 0003eab0:·5053·3c2f·6162·6272·3e0a·2020·7461·6773··PS</abbr>.··tags | |||
| Max diff block lines reached; 15191763/15214699 bytes (99.85%) of diff not shown. | |||
| Offset 229, 14 lines modified | Offset 229, 33 lines modified | ||
| 229 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 229 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 230 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 230 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 231 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 231 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 232 | ·····················FCS_TLSC_EXT.1 | 232 | ·····················FCS_TLSC_EXT.1 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 234 | ············_\x8c_\x8i_\x8s······1.6.1 | 234 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 235 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 237 | var_system_crypto_policy='FIPS' | ||
| 238 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 239 | rc=$? | ||
| 240 | if·test·"$rc"·=·127;·then | ||
| 241 | » echo·"$stderr_of_call"·>&2 | ||
| 242 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 243 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 244 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 245 | » false··#·end·with·an·error·code | ||
| 246 | elif·test·"$rc"·!=·0;·then | ||
| 247 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 248 | » false··#·end·with·an·error·code | ||
| 249 | fi | ||
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 250 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 251 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 252 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 253 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 254 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 241 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 255 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 242 | ··set_fact: | 256 | ··set_fact: |
| Offset 281, 33 lines modified | Offset 300, 14 lines modified | ||
| 281 | ··-·PCI-DSSv4-2.2.7 | 300 | ··-·PCI-DSSv4-2.2.7 |
| 282 | ··-·configure_crypto_policy | 301 | ··-·configure_crypto_policy |
| 283 | ··-·high_severity | 302 | ··-·high_severity |
| 284 | ··-·low_complexity | 303 | ··-·low_complexity |
| 285 | ··-·low_disruption | 304 | ··-·low_disruption |
| 286 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 287 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 289 | var_system_crypto_policy='FIPS' | ||
| 290 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 291 | rc=$? | ||
| 292 | if·test·"$rc"·=·127;·then | ||
| 293 | » echo·"$stderr_of_call"·>&2 | ||
| 294 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 295 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 296 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 297 | » false··#·end·with·an·error·code | ||
| 298 | elif·test·"$rc"·!=·0;·then | ||
| 299 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 300 | » false··#·end·with·an·error·code | ||
| 301 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 307 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 308 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 304 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 309 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 305 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 310 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 306 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 311 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 307 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 312 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 308 | ············expectations,·and·makes·system·configuration·more·fragmented. | 313 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 318, 14 lines modified | Offset 318, 19 lines modified | ||
| 318 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 318 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 319 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 319 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 320 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 320 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 321 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 321 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 322 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 322 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 323 | ············_\x8c_\x8i_\x8s······1.6.2 | 323 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 327 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 330 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 333 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 331 | ··lineinfile: | 334 | ··lineinfile: |
| Offset 343, 19 lines modified | Offset 348, 14 lines modified | ||
| 343 | ··-·PCI-DSSv4-2.2.7 | 348 | ··-·PCI-DSSv4-2.2.7 |
| 344 | ··-·configure_ssh_crypto_policy | 349 | ··-·configure_ssh_crypto_policy |
| 345 | ··-·disable_strategy | 350 | ··-·disable_strategy |
| 346 | ··-·low_complexity | 351 | ··-·low_complexity |
| 347 | ··-·medium_disruption | 352 | ··-·medium_disruption |
| 348 | ··-·medium_severity | 353 | ··-·medium_severity |
| 349 | ··-·reboot_required | 354 | ··-·reboot_required |
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 351 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 352 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 353 | Group ·Disk·Partitioning· Group·contains·1·rule | 355 | Group ·Disk·Partitioning· Group·contains·1·rule |
| 354 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should | 356 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should |
| 355 | be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 357 | be·placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 356 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 358 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 357 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 359 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 358 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 360 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 359 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 361 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 599, 14 lines modified | Offset 599, 23 lines modified | ||
| 599 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date | 599 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date |
| 600 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 600 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 601 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) | 601 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) |
| 602 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 | 602 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 |
| 603 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 603 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 604 | ············_\x8c_\x8i_\x8s·····reload_dconf_db | 604 | ············_\x8c_\x8i_\x8s·····reload_dconf_db |
| 605 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 | 605 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 |
| 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 607 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 608 | if·rpm·--quiet·-q·gdm·&&·{·rpm·--quiet·-q·kernel;·};·then | ||
| 609 | dconf·update | ||
| 610 | else | ||
| 611 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 612 | fi | ||
| 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 607 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 608 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 1132547/1138391 bytes (99.49%) of diff not shown. | |||
| Offset 15847, 213 lines modified | Offset 15847, 213 lines modified | ||
| 0003de60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003de60:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003de70:·646d·3331·3837·2220·7461·6269·6e64·6578··dm3187"·tabindex | 0003de70:·646d·3331·3837·2220·7461·6269·6e64·6578··dm3187"·tabindex | ||
| 0003de80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003de80:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003de90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003de90:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003dea0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003dea0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003deb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003deb0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003dec0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003dec0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ded0:·6d65·6469·6174·696f·6e20·4 | 0003ded0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003dee0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003def0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003df00:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003df10:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003df20:·6d33·3138·3722·3e3c·7461·626c·6520·636c··m3187"><table·cl | |||
| 0003df30:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003df40:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003df50:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003df60:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003df70:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003df80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003d | 0003dee0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003def0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003df00:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003df10:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003df20:·7365·2220·6964·3d22·6964·6d33·3138·3722··se"·id="idm3187" | |||
| 0003df30:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003df40:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003df50:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003df60:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003df70:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003df80:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003df90:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003dfa0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003dfb0:·7461·7267·6574·3d22·2369·646d·3331·3838··target="#idm3188 | |||
| 0003dfc0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003dfd0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003dfe0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003dff0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003e000:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003e010:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e020:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003e030:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003e040:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003e050:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003e060:·6522·2069·643d·2269·646d·3331·3838·223e··e"·id="idm3188"> | |||
| 0003e070:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e080:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e090:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e0a0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e0b0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003 | 0003e0c0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003 | 0003e0d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003dfc0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003dfd0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003 | 0003e0e0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003e0f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e100:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003 | 0003e110:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003e120:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e130:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e140:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003e150:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e160:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003e170:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003e180:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003e190:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003e1a0:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003e1b0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003e1c0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003e000:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003e010:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003e020:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003e030:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003e040:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003e050:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003e060:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003e070:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003e080:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003e090:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003e0a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003e0b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003e0c0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003e0d0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003e0e0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003e0f0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003e100:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003e110:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003e120:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003e130:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003e140:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003e150:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003e160:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003e170:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003e180:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003e190:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003e1a0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003e1b0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003e1c0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003e1d0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003e1e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003e1f0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003e200:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003e210:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003e220:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003e230:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003e240:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003e250:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003e260:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003e270:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003e280:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003e290:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003e2a0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003e2b0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003e2c0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003e2d0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003e2e0:·6765·743d·2223·6964·6d33·3138·3822·2074··get="#idm3188"·t | |||
| 0003e2f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003e300:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003e310:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003e320:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003e330:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003e340:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003e350:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003e360:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003e370:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003e380:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003e390:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003e3a0:·646d·3331·3838·223e·3c70·7265·3e3c·636f··dm3188"><pre><co | |||
| Max diff block lines reached; 14696560/14724602 bytes (99.81%) of diff not shown. | |||
| Offset 187, 14 lines modified | Offset 187, 53 lines modified | ||
| 187 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 187 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 188 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 188 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 191 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 191 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 192 | ············_\x8c_\x8i_\x8s············6.1.1 | 192 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 193 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 193 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [[packages]] | ||
| 196 | name·=·"aide" | ||
| 197 | version·=·"*" | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | include·install_aide | ||
| 204 | class·install_aide·{ | ||
| 205 | ··package·{·'aide': | ||
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | } | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 215 | if·rpm·--quiet·-q·kernel;·then | ||
| 216 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 217 | ····dnf·install·-y·"aide" | ||
| 218 | fi | ||
| 219 | else | ||
| 220 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 221 | fi | ||
| 222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 227 | package·--add=aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 228 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 229 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 230 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 231 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 232 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | -·name:·Gather·the·package·facts | 233 | -·name:·Gather·the·package·facts |
| 200 | ··package_facts: | 234 | ··package_facts: |
| Offset 223, 53 lines modified | Offset 262, 14 lines modified | ||
| 223 | ··-·PCI-DSSv4-11.5.2 | 262 | ··-·PCI-DSSv4-11.5.2 |
| 224 | ··-·enable_strategy | 263 | ··-·enable_strategy |
| 225 | ··-·low_complexity | 264 | ··-·low_complexity |
| 226 | ··-·low_disruption | 265 | ··-·low_disruption |
| 227 | ··-·medium_severity | 266 | ··-·medium_severity |
| 228 | ··-·no_reboot_needed | 267 | ··-·no_reboot_needed |
| 229 | ··-·package_aide_installed | 268 | ··-·package_aide_installed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 231 | [[packages]] | ||
| 232 | name·=·"aide" | ||
| 233 | version·=·"*" | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 239 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 240 | if·rpm·--quiet·-q·kernel;·then | ||
| 241 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 242 | ····dnf·install·-y·"aide" | ||
| 243 | fi | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 252 | include·install_aide | ||
| 253 | class·install_aide·{ | ||
| 254 | ··package·{·'aide': | ||
| 255 | ····ensure·=>·'installed', | ||
| 256 | ··} | ||
| 257 | } | ||
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 263 | package·--add=aide | ||
| 264 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 269 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 265 | Run·the·following·command·to·generate·a·new·database: | 270 | Run·the·following·command·to·generate·a·new·database: |
| 266 | $·sudo·/usr/sbin/aide·--init | 271 | $·sudo·/usr/sbin/aide·--init |
| 267 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/ | 272 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/ |
| 268 | aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides | 273 | aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides |
| 269 | additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 274 | additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 270 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 275 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| Offset 590, 14 lines modified | Offset 590, 33 lines modified | ||
| 590 | ············_\x8i_\x8s_\x8m······1446 | 590 | ············_\x8i_\x8s_\x8m······1446 |
| 591 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 591 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 592 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 592 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 593 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 593 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 594 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 594 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 595 | ············_\x8c_\x8i_\x8s······1.6.1 | 595 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 596 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 596 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 598 | var_system_crypto_policy='DEFAULT' | ||
| 599 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 600 | rc=$? | ||
| 601 | if·test·"$rc"·=·127;·then | ||
| 602 | » echo·"$stderr_of_call"·>&2 | ||
| 603 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 604 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| Max diff block lines reached; 1358639/1363947 bytes (99.61%) of diff not shown. | |||
| Offset 15457, 134 lines modified | Offset 15457, 134 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | 0003c610:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c680:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c690:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c6 | 0003c680:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003c690:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c6a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c6b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c6c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c6d0:·3133·3635·223e·3c70·7265·3e3c·636f·6465··1365"><pre><code | |||
| 0003c6e0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003c6f0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003c700:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003c710:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c720:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c730:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c740:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c750:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c760:·6d31·3336·3622·2074·6162·696e·6465·783d··m1366"·tabindex= | |||
| 0003c770:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c780:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c790:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c7a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c7b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c7c0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003c7d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003c7e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c | 0003c7f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003c800:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003c810:·3336·3622·3e3c·7461·626c·6520·636c·6173··366"><table·clas | |||
| 0003c820:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c830:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c840:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c850:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c860:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c6c0:·643d·2269·646d·3133·3635·223e·3c74·6162··d="idm1365"><tab | |||
| 0003c6d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c6e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c6f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c700:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c710:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c720:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c730:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003c740:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c | 0003c870:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003c760:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c | 0003c880:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003c890:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c | 0003c8a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c8b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c8c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c8d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c8e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c8f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c900:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003c910:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003c920:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003c930:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003c940:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003c950:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003c960:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003c790:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003c7a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003c7b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c7c0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003c7d0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003c7e0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003c7f0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003c800:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003c810:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c820:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003c830:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c840:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c850:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c860:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c870:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c880:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c890:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c8a0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c8b0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c8c0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c8d0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c8e0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003c8f0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003c900:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003c910:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003c920:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003c930:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003c940:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003c950:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003c960:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c970:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003c980:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c990:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c9a0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c9b0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c9c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c9d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c9e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c9f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ca00:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ca10:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ca20:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003ca30:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003ca40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ca50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ca60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ca70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003ca80:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003ca90:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003caa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003cab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003cac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003cad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003cae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003caf0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003cb00:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003cb10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003cb20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003cb30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003cb40:·6964·3d22·6964·6d31·3336·3622·3e3c·7072··id="idm1366"><pr | |||
| Max diff block lines reached; 2602166/2619306 bytes (99.35%) of diff not shown. | |||
| Offset 158, 14 lines modified | Offset 158, 31 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Gather·the·package·facts | 185 | -·name:·Gather·the·package·facts |
| 171 | ··package_facts: | 186 | ··package_facts: |
| Offset 194, 31 lines modified | Offset 211, 14 lines modified | ||
| 194 | ··-·PCI-DSSv4-11.5.2 | 211 | ··-·PCI-DSSv4-11.5.2 |
| 195 | ··-·enable_strategy | 212 | ··-·enable_strategy |
| 196 | ··-·low_complexity | 213 | ··-·low_complexity |
| 197 | ··-·low_disruption | 214 | ··-·low_disruption |
| 198 | ··-·medium_severity | 215 | ··-·medium_severity |
| 199 | ··-·no_reboot_needed | 216 | ··-·no_reboot_needed |
| 200 | ··-·package_aide_installed | 217 | ··-·package_aide_installed |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | [[packages]] | ||
| 203 | name·=·"aide" | ||
| 204 | version·=·"*" | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | include·install_aide | ||
| 211 | class·install_aide·{ | ||
| 212 | ··package·{·'aide': | ||
| 213 | ····ensure·=>·'installed', | ||
| 214 | ··} | ||
| 215 | } | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 219 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 218 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 220 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 219 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 221 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 220 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 222 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 221 | crontab: | 223 | crontab: |
| 222 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 224 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 431, 14 lines modified | Offset 431, 33 lines modified | ||
| 431 | ············_\x8i_\x8s_\x8m······1446 | 431 | ············_\x8i_\x8s_\x8m······1446 |
| 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 435 | ·····················FCS_TLSC_EXT.1 | 435 | ·····················FCS_TLSC_EXT.1 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 439 | var_system_crypto_policy='DEFAULT' | ||
| 440 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 441 | rc=$? | ||
| 442 | if·test·"$rc"·=·127;·then | ||
| 443 | » echo·"$stderr_of_call"·>&2 | ||
| 444 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 445 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 446 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 447 | » false··#·end·with·an·error·code | ||
| 448 | elif·test·"$rc"·!=·0;·then | ||
| 449 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 450 | » false··#·end·with·an·error·code | ||
| 451 | fi | ||
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 443 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 444 | ··set_fact: | 458 | ··set_fact: |
| Offset 483, 33 lines modified | Offset 502, 14 lines modified | ||
| 483 | ··-·PCI-DSSv4-2.2.7 | 502 | ··-·PCI-DSSv4-2.2.7 |
| 484 | ··-·configure_crypto_policy | 503 | ··-·configure_crypto_policy |
| 485 | ··-·high_severity | 504 | ··-·high_severity |
| 486 | ··-·low_complexity | 505 | ··-·low_complexity |
| 487 | ··-·low_disruption | 506 | ··-·low_disruption |
| 488 | ··-·no_reboot_needed | 507 | ··-·no_reboot_needed |
| 489 | ··-·restrict_strategy | 508 | ··-·restrict_strategy |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | var_system_crypto_policy='DEFAULT' | ||
| 492 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 493 | rc=$? | ||
| 494 | if·test·"$rc"·=·127;·then | ||
| 495 | » echo·"$stderr_of_call"·>&2 | ||
| 496 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 497 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 498 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | elif·test·"$rc"·!=·0;·then | ||
| 501 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 502 | » false··#·end·with·an·error·code | ||
| 503 | fi | ||
| 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 505 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 506 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 511 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 285919/291237 bytes (98.17%) of diff not shown. | |||
| Offset 15048, 134 lines modified | Offset 15048, 134 lines modified | ||
| 0003ac70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003ac70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003ac80:·2369·646d·3133·3635·2220·7461·6269·6e64··#idm1365"·tabind | 0003ac80:·2369·646d·3133·3635·2220·7461·6269·6e64··#idm1365"·tabind | ||
| 0003ac90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003ac90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003aca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003aca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003acb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003acb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003acc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003acc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003acd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003acd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003ace0:·5265·6d65·6469·6174·696f·6e20·4 | 0003ace0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003acf0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003ad00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ad10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ad20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ad30:·6964·6d31·3336·3522·3e3c·7461·626c·6520··idm1365"><table· | |||
| 0003ad40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ad50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ad60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ad70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ad80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ad90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a | 0003acf0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003ad00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003ad10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ad20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ad30:·6170·7365·2220·6964·3d22·6964·6d31·3336··apse"·id="idm136 | |||
| 0003ad40:·3522·3e3c·7072·653e·3c63·6f64·653e·0a5b··5"><pre><code>.[ | |||
| 0003ad50:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003ad60:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003ad70:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003ad80:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ad90:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ada0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003adb0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003adc0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003add0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003ade0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003adf0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003ae00:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003ae10:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003ae20:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003ae30:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003ae40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae70:·7073·6522·2069·643d·2269·646d·3133·3636··pse"·id="idm1366 | |||
| 0003ae80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003aea0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003aeb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003aec0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003a | 0003aed0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003a | 0003aee0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003aef0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003add0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ade0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003adf0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ae00:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ae10:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ae20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ae30:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003ae40:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003ae50:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003ae60:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003ae70:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003ae80:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003ae90:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003aea0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003aeb0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003aec0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003aed0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003aee0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003aef0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003af00:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003af10:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003af20:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003af30:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003af40:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003af50:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003af60:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003af70:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003af80:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003af90:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003afa0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003afb0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003afc0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003afd0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003afe0:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003aff0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b000:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b010:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b020:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b030:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b040:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b050:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b060:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b070:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b080:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b090:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b0a0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b0b0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b0c0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b0d0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b0e0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b0f0:·6172·6765·743d·2223·6964·6d31·3336·3622··arget="#idm1366" | |||
| 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b160:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b170:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b180:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b190:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1b0:·2269·646d·3133·3636·223e·3c70·7265·3e3c··"idm1366"><pre>< | |||
| 0003b1c0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b1d0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b1e0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d31·3336·3722·2074·6162·696e··"#idm1367"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| Max diff block lines reached; 3112558/3129698 bytes (99.45%) of diff not shown. | |||
| Offset 114, 14 lines modified | Offset 114, 31 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 142 | ··package_facts: |
| Offset 150, 31 lines modified | Offset 167, 14 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 169 | ··-·low_complexity |
| 153 | ··-·low_disruption | 170 | ··-·low_disruption |
| 154 | ··-·medium_severity | 171 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 175 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 174 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 176 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 175 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 177 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 176 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 178 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 177 | crontab: | 179 | crontab: |
| 178 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 180 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 387, 14 lines modified | Offset 387, 33 lines modified | ||
| 387 | ············_\x8i_\x8s_\x8m······1446 | 387 | ············_\x8i_\x8s_\x8m······1446 |
| 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 391 | ·····················FCS_TLSC_EXT.1 | 391 | ·····················FCS_TLSC_EXT.1 |
| 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | var_system_crypto_policy='DEFAULT' | ||
| 396 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 397 | rc=$? | ||
| 398 | if·test·"$rc"·=·127;·then | ||
| 399 | » echo·"$stderr_of_call"·>&2 | ||
| 400 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 401 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 402 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 403 | » false··#·end·with·an·error·code | ||
| 404 | elif·test·"$rc"·!=·0;·then | ||
| 405 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | fi | ||
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 399 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 413 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 400 | ··set_fact: | 414 | ··set_fact: |
| Offset 439, 33 lines modified | Offset 458, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-2.2.7 | 458 | ··-·PCI-DSSv4-2.2.7 |
| 440 | ··-·configure_crypto_policy | 459 | ··-·configure_crypto_policy |
| 441 | ··-·high_severity | 460 | ··-·high_severity |
| 442 | ··-·low_complexity | 461 | ··-·low_complexity |
| 443 | ··-·low_disruption | 462 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 463 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 464 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 449 | rc=$? | ||
| 450 | if·test·"$rc"·=·127;·then | ||
| 451 | » echo·"$stderr_of_call"·>&2 | ||
| 452 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 453 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 454 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 455 | » false··#·end·with·an·error·code | ||
| 456 | elif·test·"$rc"·!=·0;·then | ||
| 457 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 458 | » false··#·end·with·an·error·code | ||
| 459 | fi | ||
| 460 | Group ·Updating·Software· Group·contains·1·rule | 465 | Group ·Updating·Software· Group·contains·1·rule |
| 461 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 466 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 462 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 467 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| Max diff block lines reached; 340290/345473 bytes (98.50%) of diff not shown. | |||
| Offset 15457, 133 lines modified | Offset 15457, 133 lines modified | ||
| 0003c600:·6172·6765·743d·2223·6964·6d31·3336·3522··arget="#idm1365" | 0003c600:·6172·6765·743d·2223·6964·6d31·3336·3522··arget="#idm1365" | ||
| 0003c610:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003c610:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c620:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003c620:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c630:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c630:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c640:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c640:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c650:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c650:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c660:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c660:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c670:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c680:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c690:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c6a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c6b0:·6522·2069·643d·2269·646d·3133·3635·223e··e"·id="idm1365"> | |||
| 0003c6c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c6d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c6e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c6f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c700:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c710:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c720:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c | 0003c670:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003c680:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c690:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c6a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c6b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c6c0:·2269·646d·3133·3635·223e·3c70·7265·3e3c··"idm1365"><pre>< | |||
| 0003c6d0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003c6e0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c6f0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c700:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c710:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c720:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c730:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c750:·2223·6964·6d31·3336·3622·2074·6162·696e··"#idm1366"·tabin | |||
| 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003c7c0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c7d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c7e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c7f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c800:·6964·6d31·3336·3622·3e3c·7461·626c·6520··idm1366"><table· | |||
| 0003c810:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c820:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c830:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c840:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c850:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c | 0003c860:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003c | 0003c870:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c7 | 0003c880:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c890:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003c | 0003c8a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003c | 0003c8b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c8c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c8d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c8e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c8f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c900:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003c910:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003c920:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003c930:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003c940:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003c950:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003c7a0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c7b0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c7c0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003c7d0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003c7e0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003c7f0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003c800:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c810:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003c820:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c830:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c840:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c850:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c860:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c870:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c880:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c890:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c8a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c8b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c8c0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c8d0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003c8e0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c8f0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c900:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c910:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c920:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003c930:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003c940:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003c950:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003c960:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c970:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c980:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c990:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c9a0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c9b0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c9c0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c9d0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c9e0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c9f0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ca00:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ca10:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003ca20:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003ca30:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ca40:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ca50:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ca60:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ca70:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ca80:·646d·3133·3636·2220·7461·6269·6e64·6578··dm1366"·tabindex | |||
| 0003ca90:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003caa0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003cab0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003cac0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003cad0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003cae0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003caf0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003cb00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003cb10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003cb20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003cb30:·7365·2220·6964·3d22·6964·6d31·3336·3622··se"·id="idm1366" | |||
| 0003cb40:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003cb50:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003cb60:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| Max diff block lines reached; 2602718/2619720 bytes (99.35%) of diff not shown. | |||
| Offset 158, 14 lines modified | Offset 158, 31 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Gather·the·package·facts | 185 | -·name:·Gather·the·package·facts |
| 171 | ··package_facts: | 186 | ··package_facts: |
| Offset 194, 31 lines modified | Offset 211, 14 lines modified | ||
| 194 | ··-·PCI-DSSv4-11.5.2 | 211 | ··-·PCI-DSSv4-11.5.2 |
| 195 | ··-·enable_strategy | 212 | ··-·enable_strategy |
| 196 | ··-·low_complexity | 213 | ··-·low_complexity |
| 197 | ··-·low_disruption | 214 | ··-·low_disruption |
| 198 | ··-·medium_severity | 215 | ··-·medium_severity |
| 199 | ··-·no_reboot_needed | 216 | ··-·no_reboot_needed |
| 200 | ··-·package_aide_installed | 217 | ··-·package_aide_installed |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | [[packages]] | ||
| 203 | name·=·"aide" | ||
| 204 | version·=·"*" | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | include·install_aide | ||
| 211 | class·install_aide·{ | ||
| 212 | ··package·{·'aide': | ||
| 213 | ····ensure·=>·'installed', | ||
| 214 | ··} | ||
| 215 | } | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 219 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 218 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 220 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 219 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 221 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 220 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 222 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 221 | crontab: | 223 | crontab: |
| 222 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 224 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 431, 14 lines modified | Offset 431, 33 lines modified | ||
| 431 | ············_\x8i_\x8s_\x8m······1446 | 431 | ············_\x8i_\x8s_\x8m······1446 |
| 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 432 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 433 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 434 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 435 | ·····················FCS_TLSC_EXT.1 | 435 | ·····················FCS_TLSC_EXT.1 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 439 | var_system_crypto_policy='DEFAULT' | ||
| 440 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 441 | rc=$? | ||
| 442 | if·test·"$rc"·=·127;·then | ||
| 443 | » echo·"$stderr_of_call"·>&2 | ||
| 444 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 445 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 446 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 447 | » false··#·end·with·an·error·code | ||
| 448 | elif·test·"$rc"·!=·0;·then | ||
| 449 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 450 | » false··#·end·with·an·error·code | ||
| 451 | fi | ||
| 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 443 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 444 | ··set_fact: | 458 | ··set_fact: |
| Offset 483, 33 lines modified | Offset 502, 14 lines modified | ||
| 483 | ··-·PCI-DSSv4-2.2.7 | 502 | ··-·PCI-DSSv4-2.2.7 |
| 484 | ··-·configure_crypto_policy | 503 | ··-·configure_crypto_policy |
| 485 | ··-·high_severity | 504 | ··-·high_severity |
| 486 | ··-·low_complexity | 505 | ··-·low_complexity |
| 487 | ··-·low_disruption | 506 | ··-·low_disruption |
| 488 | ··-·no_reboot_needed | 507 | ··-·no_reboot_needed |
| 489 | ··-·restrict_strategy | 508 | ··-·restrict_strategy |
| 490 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 491 | var_system_crypto_policy='DEFAULT' | ||
| 492 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 493 | rc=$? | ||
| 494 | if·test·"$rc"·=·127;·then | ||
| 495 | » echo·"$stderr_of_call"·>&2 | ||
| 496 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 497 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 498 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 499 | » false··#·end·with·an·error·code | ||
| 500 | elif·test·"$rc"·!=·0;·then | ||
| 501 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 502 | » false··#·end·with·an·error·code | ||
| 503 | fi | ||
| 504 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 505 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 510 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 506 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 511 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| Max diff block lines reached; 285916/291234 bytes (98.17%) of diff not shown. | |||
| Offset 15047, 134 lines modified | Offset 15047, 134 lines modified | ||
| 0003ac60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac70:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | 0003ac70:·743d·2223·6964·6d31·3336·3522·2074·6162··t="#idm1365"·tab | ||
| 0003ac80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003aca0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003aca0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003acb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003acb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003acc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003acc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003acd0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003acd0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ace0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003acf0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a | 0003ace0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003acf0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ad00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ad10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ad20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ad30:·3133·3635·223e·3c70·7265·3e3c·636f·6465··1365"><pre><code | |||
| 0003ad40:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad50:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad60:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003ad70:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad80:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad90:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ada0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003adb0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003adc0:·6d31·3336·3622·2074·6162·696e·6465·783d··m1366"·tabindex= | |||
| 0003add0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ade0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003adf0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ae00:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ae10:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003ae20:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003ae30:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae40:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a | 0003ae50:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003ae60:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003ae70:·3336·3622·3e3c·7461·626c·6520·636c·6173··366"><table·clas | |||
| 0003ae80:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ae90:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003aea0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003aeb0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003aec0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ad20:·643d·2269·646d·3133·3635·223e·3c74·6162··d="idm1365"><tab | |||
| 0003ad30:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad40:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad50:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad60:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad70:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ada0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a | 0003aed0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003adc0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a | 0003aee0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003aef0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003a | 0003af00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003af10:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003af20:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003af30:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003af40:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003af50:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003af60:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003af70:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003af80:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003af90:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003afa0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003afb0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003afc0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003adf0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ae00:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ae10:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ae20:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003ae30:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003ae40:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ae50:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003ae60:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003ae70:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003ae80:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003ae90:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003aea0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003aeb0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003aec0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003aed0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003aee0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003aef0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003af00:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003af10:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003af20:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003af30:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003af40:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003af50:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003af60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003af70:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003af80:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003af90:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003afa0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003afb0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003afc0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003afd0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003afe0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003aff0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b000:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b010:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b020:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b030:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b040:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b050:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b060:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b070:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b080:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b090:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b0a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b0b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b0c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b0d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b0e0:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003b0f0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | |||
| 0003b100:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b110:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b120:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b130:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b140:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b150:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b160:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b170:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b180:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b190:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1a0:·6964·3d22·6964·6d31·3336·3622·3e3c·7072··id="idm1366"><pr | |||
| Max diff block lines reached; 3111523/3128663 bytes (99.45%) of diff not shown. | |||
| Offset 114, 14 lines modified | Offset 114, 31 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 142 | ··package_facts: |
| Offset 150, 31 lines modified | Offset 167, 14 lines modified | ||
| 150 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 151 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 152 | ··-·low_complexity | 169 | ··-·low_complexity |
| 153 | ··-·low_disruption | 170 | ··-·low_disruption |
| 154 | ··-·medium_severity | 171 | ··-·medium_severity |
| 155 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 156 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 175 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 174 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 176 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 175 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 177 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 176 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 178 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 177 | crontab: | 179 | crontab: |
| 178 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 180 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 387, 14 lines modified | Offset 387, 33 lines modified | ||
| 387 | ············_\x8i_\x8s_\x8m······1446 | 387 | ············_\x8i_\x8s_\x8m······1446 |
| 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 388 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 389 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 390 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 391 | ·····················FCS_TLSC_EXT.1 | 391 | ·····················FCS_TLSC_EXT.1 |
| 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 392 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 393 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 395 | var_system_crypto_policy='DEFAULT' | ||
| 396 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 397 | rc=$? | ||
| 398 | if·test·"$rc"·=·127;·then | ||
| 399 | » echo·"$stderr_of_call"·>&2 | ||
| 400 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 401 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 402 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 403 | » false··#·end·with·an·error·code | ||
| 404 | elif·test·"$rc"·!=·0;·then | ||
| 405 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 406 | » false··#·end·with·an·error·code | ||
| 407 | fi | ||
| 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 399 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 413 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 400 | ··set_fact: | 414 | ··set_fact: |
| Offset 439, 33 lines modified | Offset 458, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-2.2.7 | 458 | ··-·PCI-DSSv4-2.2.7 |
| 440 | ··-·configure_crypto_policy | 459 | ··-·configure_crypto_policy |
| 441 | ··-·high_severity | 460 | ··-·high_severity |
| 442 | ··-·low_complexity | 461 | ··-·low_complexity |
| 443 | ··-·low_disruption | 462 | ··-·low_disruption |
| 444 | ··-·no_reboot_needed | 463 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 464 | ··-·restrict_strategy |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | var_system_crypto_policy='DEFAULT' | ||
| 448 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 449 | rc=$? | ||
| 450 | if·test·"$rc"·=·127;·then | ||
| 451 | » echo·"$stderr_of_call"·>&2 | ||
| 452 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 453 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 454 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 455 | » false··#·end·with·an·error·code | ||
| 456 | elif·test·"$rc"·!=·0;·then | ||
| 457 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 458 | » false··#·end·with·an·error·code | ||
| 459 | fi | ||
| 460 | Group ·Updating·Software· Group·contains·1·rule | 465 | Group ·Updating·Software· Group·contains·1·rule |
| 461 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 466 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 462 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 467 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| Max diff block lines reached; 340284/345467 bytes (98.50%) of diff not shown. | |||
| Offset 15320, 283 lines modified | Offset 15320, 283 lines modified | ||
| 0003bd70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003bd70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003bd80:·743d·2223·6964·6d38·3031·3222·2074·6162··t="#idm8012"·tab | 0003bd80:·743d·2223·6964·6d38·3031·3222·2074·6162··t="#idm8012"·tab | ||
| 0003bd90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003bd90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003bda0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003bda0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003bdb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003bdb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003bdc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003bdc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003bdd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003bdd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003bde0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003bde0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003bdf0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003be00:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b | 0003bdf0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003be00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003be10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003be20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be40:·3830·3132·223e·3c70·7265·3e3c·636f·6465··8012"><pre><code | |||
| 0003be50:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003be60:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003be70:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003be80:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003be90:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bea0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003beb0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bec0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bed0:·6d38·3031·3322·2074·6162·696e·6465·783d··m8013"·tabindex= | |||
| 0003bee0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bef0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bf00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bf10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bf20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bf30:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003bf40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bf50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003bf60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003bf70:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bf80:·3031·3322·3e3c·7461·626c·6520·636c·6173··013"><table·clas | |||
| 0003bf90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bfa0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bfb0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bfc0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bfd0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003be30:·643d·2269·646d·3830·3132·223e·3c74·6162··d="idm8012"><tab | |||
| 0003be40:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003be50:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003be60:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003be70:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003be80:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003be90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bea0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003beb0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003bfe0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003bed0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003bff0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003c000:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003 | 0003c010:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c020:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c030:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c040:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c050:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c060:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c070:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003bf00:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bf10:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bf20:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bf30:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003bf40:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003bf50:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003bf60:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003bf70:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003bf80:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003bf90:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003bfa0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003bfb0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003bfc0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003bfd0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003bfe0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003bff0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c000:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c010:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c020:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c030:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c040:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c050:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c060:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003c070:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003c080:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003c090:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003c0a0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003c0b0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003c0c0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003c0d0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003c0e0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003c0f0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003c100:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003c110:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003c120:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003c130:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c140:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c150:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c160:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c170:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c180:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c190:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c1a0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c1b0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c1c0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c1d0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c1e0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003c1f0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c200:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c210:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c220:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c230:·6574·3d22·2369·646d·3830·3133·2220·7461··et="#idm8013"·ta | |||
| 0003c240:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c250:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c260:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c270:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c280:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c290:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c2a0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003c2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c2d0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c2e0:·3133·223e·3c74·6162·6c65·2063·6c61·7373··13"><table·class | |||
| 0003c2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c300:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c310:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| Max diff block lines reached; 22844279/22881981 bytes (99.84%) of diff not shown. | |||
| Offset 15326, 282 lines modified | Offset 15326, 282 lines modified | ||
| 0003bdd0:·7267·6574·3d22·2369·646d·3830·3132·2220··rget="#idm8012"· | 0003bdd0:·7267·6574·3d22·2369·646d·3830·3132·2220··rget="#idm8012"· | ||
| 0003bde0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bde0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bdf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bdf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003be00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003be00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003be10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003be10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003be20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003be20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003be30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003be30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003be40:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003be50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003be60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003be70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003be80:·2220·6964·3d22·6964·6d38·3031·3222·3e3c··"·id="idm8012">< | |||
| 0003be90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bea0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003beb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bec0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bed0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bee0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003be40:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003be50:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003be60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003be70:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003be80:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003be90:·6964·6d38·3031·3222·3e3c·7072·653e·3c63··idm8012"><pre><c | |||
| 0003bea0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003beb0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bec0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bed0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bee0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bef0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bf00:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bf10:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bf20:·2369·646d·3830·3133·2220·7461·6269·6e64··#idm8013"·tabind | |||
| 0003bf30:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bf40:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bf50:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bf60:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bf70:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bf80:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003bf90:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003bfa0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bfb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bfc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bfd0:·646d·3830·3133·223e·3c74·6162·6c65·2063··dm8013"><table·c | |||
| 0003bfe0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bff0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c000:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c010:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c020:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003 | 0003c030:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003bf20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003 | 0003c040:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003c050:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003 | 0003c060:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003c070:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c080:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c090:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c0a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bf50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bf60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bf70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bf80:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003bf90:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003bfa0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003bfb0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003bfc0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003bfd0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003bfe0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bff0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003c000:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003c010:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003c020:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003c030:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003c040:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003c050:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003c060:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003c070:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003c080:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003c090:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003c0a0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003c0b0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003c0c0:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003c0d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003c0e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003c0f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003c100:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003c110:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003c120:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003c130:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003c140:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c150:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003c160:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003c170:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003c180:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003c190:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003c1a0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003c1b0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003c1c0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003c1d0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003c1e0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003c1f0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003c200:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003c210:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003c220:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003c230:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003c240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c280:·6172·6765·743d·2223·6964·6d38·3031·3322··arget="#idm8013" | |||
| 0003c290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c2f0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003c300:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c310:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c320:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c330:·6d38·3031·3322·3e3c·7461·626c·6520·636c··m8013"><table·cl | |||
| 0003c340:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c350:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c360:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c370:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c380:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| Max diff block lines reached; 23134547/23172111 bytes (99.84%) of diff not shown. | |||
| Offset 15316, 283 lines modified | Offset 15316, 283 lines modified | ||
| 0003bd30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bd30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bd40:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | 0003bd40:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | ||
| 0003bd50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bd50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bd60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bd60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bd70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bd70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bd80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bd80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003bd90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bd90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bda0:·5265·6d65·6469·6174·696f·6e20·4 | 0003bda0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003bdb0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003bdc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bdd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bde0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bdf0:·6964·6d38·3031·3222·3e3c·7461·626c·6520··idm8012"><table· | |||
| 0003be00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003be10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003be20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003be30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003be40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003be50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003bdb0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003bdc0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bdd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bde0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bdf0:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003be00:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003be10:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003be20:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003be30:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003be40:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003be50:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003be60:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003be70:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003be80:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003be90:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | |||
| 0003bea0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003beb0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bec0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bed0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bee0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bef0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bf00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bf10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bf20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bf30:·7073·6522·2069·643d·2269·646d·3830·3133··pse"·id="idm8013 | |||
| 0003bf40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bf50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bf60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bf70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bf80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003bf90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003bfa0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003be90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003bfb0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003bfc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b | 0003bfd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003bfe0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bff0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c000:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c010:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c020:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c030:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003bed0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bee0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bef0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003bf00:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003bf10:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003bf20:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003bf30:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003bf40:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bf50:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bf60:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bf70:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bf80:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bf90:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bfa0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bfb0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bfc0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bfd0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bfe0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bff0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c000:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c010:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c020:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003c030:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003c040:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c050:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c060:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003c070:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003c080:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003c090:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003c0a0:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003c0b0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c0c0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c0d0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c0e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c0f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c100:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c110:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c120:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c130:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c140:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c150:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c160:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c170:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c180:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c190:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c1a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c1b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c1c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c1d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c1e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c1f0:·2223·6964·6d38·3031·3322·2074·6162·696e··"#idm8013"·tabin | |||
| 0003c200:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c210:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c220:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c230:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c240:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c250:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003c260:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c270:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c280:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c290:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c2a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c2b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c2c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c2d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c2e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| Max diff block lines reached; 9841794/9879496 bytes (99.62%) of diff not shown. | |||
| Offset 147, 14 lines modified | Offset 147, 60 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | include·install_aide | ||
| 164 | class·install_aide·{ | ||
| 165 | ··package·{·'aide': | ||
| 166 | ····ensure·=>·'installed', | ||
| 167 | ··} | ||
| 168 | } | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 175 | if·rpm·--quiet·-q·kernel;·then | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 177 | ····yum·install·-y·"aide" | ||
| 178 | fi | ||
| 179 | else | ||
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 181 | fi | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·--add=aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | dnf·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Gather·the·package·facts | 199 | -·name:·Gather·the·package·facts |
| 160 | ··package_facts: | 200 | ··package_facts: |
| Offset 192, 60 lines modified | Offset 238, 14 lines modified | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | package·install·aide | 243 | package·install·aide |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | [[packages]] | ||
| 200 | name·=·"aide" | ||
| 201 | version·=·"*" | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 207 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 208 | if·rpm·--quiet·-q·kernel;·then | ||
| 209 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 210 | ····yum·install·-y·"aide" | ||
| 211 | fi | ||
| 212 | else | ||
| 213 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 214 | fi | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 220 | dnf·install·aide | ||
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 226 | include·install_aide | ||
| 227 | class·install_aide·{ | ||
| 228 | ··package·{·'aide': | ||
| 229 | ····ensure·=>·'installed', | ||
| 230 | ··} | ||
| 231 | } | ||
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 233 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 234 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 235 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 236 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 237 | package·--add=aide | ||
| 238 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 244 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 239 | Run·the·following·command·to·generate·a·new·database: | 245 | Run·the·following·command·to·generate·a·new·database: |
| 240 | $·sudo·/usr/sbin/aide·--init | 246 | $·sudo·/usr/sbin/aide·--init |
| 241 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 247 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 242 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 248 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 243 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 249 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 244 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 250 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 271, 14 lines modified | Offset 271, 28 lines modified | ||
| 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 271 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 272 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 273 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 274 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 274 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 275 | ············_\x8c_\x8i_\x8s············5.3.1 | 275 | ············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1112769/1117651 bytes (99.56%) of diff not shown. | |||
| Offset 14991, 294 lines modified | Offset 14991, 294 lines modified | ||
| 0003a8e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003a8e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003a8f0:·6d31·3332·3531·2220·7461·6269·6e64·6578··m13251"·tabindex | 0003a8f0:·6d31·3332·3531·2220·7461·6269·6e64·6578··m13251"·tabindex | ||
| 0003a900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003a900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003a910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003a910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003a920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003a920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003a930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003a930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003a940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003a940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003a950:·6d65·6469·6174·696f·6e20·4 | 0003a950:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003a960:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003a970:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003a980:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003a990:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a9a0:·7365·2220·6964·3d22·6964·6d31·3332·3531··se"·id="idm13251 | |||
| 0003a9b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003a9c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003a960:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003a970:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003a980:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003a990:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003a9a0:·6d31·3332·3531·223e·3c74·6162·6c65·2063··m13251"><table·c | |||
| 0003a9b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003a9c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003a9d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003a9e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003a9f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003aa00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aa10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aa20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003aa30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aa40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003aa50:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003aa60:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003aa70:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003aa80:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003aa90:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003aaa0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003aab0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003aac0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003aad0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003aae0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003aaf0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003ab00:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ab10:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ab20:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ab30:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003ab40:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ab50:·202d·2070·6163·6b61·6765·5f64·6e66·2d61···-·package_dnf-a | |||
| 0003ab60:·7574·6f6d·6174·6963·5f69·6e73·7461·6c6c··utomatic_install | |||
| 0003ab70:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003a | 0003a9d0:·3d20·2264·6e66·2d61·7574·6f6d·6174·6963··=·"dnf-automatic | ||
| 0003a9e0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ab90:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003aba0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003abb0:·653a·2064·6e66·2d61·7574·6f6d·6174·6963··e:·dnf-automatic | |||
| 0003abc0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003abd0:·656e·740a·2020·7768·656e·3a20·6e6f·7420··ent.··when:·not· | |||
| 0003abe0:·2820·226b·6572·6e65·6c22·2069·6e20·616e··(·"kernel"·in·an | |||
| 0003abf0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003ac00:·6167·6573·2061·6e64·2022·7270·6d2d·6f73··ages·and·"rpm-os | |||
| 0003ac10:·7472·6565·2220·696e·2061·6e73·6962·6c65··tree"·in·ansible | |||
| 0003ac20:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | |||
| 0003ac30:·2020·2020·616e·6420·2262·6f6f·7463·2220······and·"bootc"· | |||
| 0003ac40:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003ac50:·2e70·6163·6b61·6765·7320·616e·6420·6e6f··.packages·and·no | |||
| 0003ac60:·7420·226f·7065·6e73·6869·6674·2d6b·7562··t·"openshift-kub | |||
| 0003ac70:·656c·6574·2220·696e·2061·6e73·6962·6c65··elet"·in·ansible | |||
| 0003ac80:·5f66·6163·7473·2e70·6163·6b61·6765·730a··_facts.packages. | |||
| 0003ac90:·2020·2020·290a·2020·7461·6773·3a0a·2020······).··tags:.·· | |||
| 0003aca0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003acb0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003acc0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003acd0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ace0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003acf0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ad00:·0a20·202d·2070·6163·6b61·6765·5f64·6e66··.··-·package_dnf | |||
| 0003ad10:·2d61·7574·6f6d·6174·6963·5f69·6e73·7461··-automatic_insta | |||
| 0003ad20:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003ad30:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ad40:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ad50:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ad60:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ad70:·6172·6765·743d·2223·6964·6d31·3332·3532··arget="#idm13252 | |||
| 0003ad80:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad90:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ada0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003adb0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003adc0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003add0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ade0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003adf0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae00:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae10:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae20:·646d·3133·3235·3222·3e3c·7461·626c·6520··dm13252"><table· | |||
| 0003ae30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ae40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ae50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ae60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ae70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ae80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003aea0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003aeb0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aec0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003aed0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003aee0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003aef0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003af00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003af10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003af20:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003af30:·6c20·646e·662d·6175·746f·6d61·7469·630a··l·dnf-automatic. | |||
| 0003a | 0003a9f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003a | 0003aa00:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003a | 0003aa10:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003a | 0003aa20:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003a | 0003aa30:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a | 0003aa40:·3d22·2369·646d·3133·3235·3222·2074·6162··="#idm13252"·tab | ||
| 0003a | 0003aa50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a | 0003aa60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a | 0003aa70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a | 0003aa80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a | 0003aa90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a | 0003aaa0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | ||
| 0003b000:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b010:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b020:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b030:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b040:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| Max diff block lines reached; 3376342/3415562 bytes (98.85%) of diff not shown. | |||
| Offset 112, 57 lines modified | Offset 112, 31 lines modified | ||
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 116 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 117 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 117 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | -·name:·Gather·the·package·facts | ||
| 125 | ··package_facts: | ||
| 126 | ····manager:·auto | ||
| 127 | ··tags: | ||
| 128 | ··-·enable_strategy | ||
| 129 | ··-·low_complexity | ||
| 130 | ··-·low_disruption | ||
| 131 | ··-·medium_severity | ||
| 132 | ··-·no_reboot_needed | ||
| 133 | ··-·package_dnf-automatic_installed | ||
| 120 | [[packages]] | ||
| 134 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 135 | ··package: | ||
| 136 | 121 | name·=·"dnf-automatic" | |
| 122 | version·=·"*" | ||
| 137 | ····state:·present | ||
| 138 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 139 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 140 | ansible_facts.packages | ||
| 141 | ····) | ||
| 142 | ··tags: | ||
| 143 | ··-·enable_strategy | ||
| 144 | ··-·low_complexity | ||
| 145 | ··-·low_disruption | ||
| 146 | ··-·medium_severity | ||
| 147 | ··-·no_reboot_needed | ||
| 148 | ··-·package_dnf-automatic_installed | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | include·install_dnf-automatic | ||
| 129 | class·install_dnf-automatic·{ | ||
| 154 | package· | 130 | ··package·{·'dnf-automatic': |
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"dnf-automatic" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 139 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 140 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 171, 40 lines modified | Offset 145, 66 lines modified | ||
| 171 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 145 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 172 | ····yum·install·-y·"dnf-automatic" | 146 | ····yum·install·-y·"dnf-automatic" |
| 173 | fi | 147 | fi |
| 174 | else | 148 | else |
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 176 | fi | 150 | fi |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·--add=dnf-automatic | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | dnf·install·dnf-automatic | 162 | dnf·install·dnf-automatic |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | 168 | -·name:·Gather·the·package·facts | |
| 169 | ··package_facts: | ||
| 170 | ····manager:·auto | ||
| 171 | ··tags: | ||
| 172 | ··-·enable_strategy | ||
| 173 | ··-·low_complexity | ||
| 174 | ··-·low_disruption | ||
| 175 | ··-·medium_severity | ||
| 176 | ··-·no_reboot_needed | ||
| 177 | ··-·package_dnf-automatic_installed | ||
| 189 | class·install_dnf-automatic·{ | ||
| 190 | ··package·{·'dnf-automatic': | ||
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | 178 | -·name:·Ensure·dnf-automatic·is·installed | |
| 179 | ··package: | ||
| 180 | ····name:·dnf-automatic | ||
| 181 | ····state:·present | ||
| 182 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 183 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 184 | ansible_facts.packages | ||
| 185 | ····) | ||
| 186 | ··tags: | ||
| 187 | ··-·enable_strategy | ||
| 188 | ··-·low_complexity | ||
| 189 | ··-·low_disruption | ||
| 190 | ··-·medium_severity | ||
| 191 | ··-·no_reboot_needed | ||
| 192 | ··-·package_dnf-automatic_installed | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 243269/247890 bytes (98.14%) of diff not shown. | |||
| Offset 15373, 282 lines modified | Offset 15373, 282 lines modified | ||
| 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c0d0:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | 0003c0d0:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | ||
| 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c130:·656d·6564·6961·7469·6f6e·204 | 0003c130:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003c140:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c150:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c160:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c170:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c180:·646d·3830·3132·223e·3c74·6162·6c65·2063··dm8012"><table·c | |||
| 0003c190:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c1a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c1b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c1c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c1d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c1e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c1 | 0003c140:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003c150:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c160:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c170:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c180:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003c190:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003c1a0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003c1b0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003c1c0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003c1d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c1e0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c1f0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c200:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c210:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003c220:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003c230:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c240:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c250:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c260:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c270:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c280:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003c290:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c2a0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c2b0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c2c0:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c2d0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c2e0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c2f0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c300:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c310:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c | 0003c320:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003c | 0003c330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003c220:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c | 0003c340:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c350:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c | 0003c360:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003c | 0003c370:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c380:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c390:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c3a0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c3b0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c3c0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003c260:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c270:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c280:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003c290:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003c2a0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003c2b0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003c2c0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003c2d0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c2e0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c2f0:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c300:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c310:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c320:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c330:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c340:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c350:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c360:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c370:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c380:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c390:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c3a0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c3b0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003c3c0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c3d0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c3e0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c3f0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c400:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c410:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003c420:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003c430:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003c440:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003c450:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003c460:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003c470:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c480:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003c490:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003c4a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003c4b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c4c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c4d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c4e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c4f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c500:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c510:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003c520:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003c530:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c540:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c550:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c560:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c570:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c580:·2369·646d·3830·3133·2220·7461·6269·6e64··#idm8013"·tabind | |||
| 0003c590:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c5a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c5b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c5c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c5d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c5e0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003c5f0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003c600:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c610:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c620:·6522·2069·643d·2269·646d·3830·3133·223e··e"·id="idm8013"> | |||
| 0003c630:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c640:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c650:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c660:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c670:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 26142576/26180140 bytes (99.86%) of diff not shown. | |||
| Offset 15335, 282 lines modified | Offset 15335, 282 lines modified | ||
| 0003be60:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | 0003be60:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | ||
| 0003be70:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | 0003be70:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | ||
| 0003be80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003be80:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003be90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003be90:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bea0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003beb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003beb0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bec0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bed0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003bed0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bee0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bef0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bf00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bf10:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003bf20:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003bf30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bf40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bf50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bf60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bf70:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bf80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bf90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bfa0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bfb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003bfc0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bfd0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bfe0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bff0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c000:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c010:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003c020:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003c030:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003c040:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003c050:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003c060:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c070:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c080:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c090:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c0a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c0b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c0c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c0d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c0e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c0f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c100:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c110:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c120:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c130:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c140:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c150:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003c160:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c170:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c180:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c190:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c1a0:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003c1b0:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003c1c0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003c1d0:·270a·2020·7461·6773·3a0a·2020·2d20·434a··'.··tags:.··-·CJ | |||
| 0003c1e0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c1f0:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c200:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c210:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c220:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c230:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c240:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c250:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c260:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c270:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c280:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c290:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c2a0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c2b0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c2c0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c2d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c2e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c2f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c300:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c310:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c320:·3031·3322·2074·6162·696e·6465·783d·2230··013"·tabindex="0 | |||
| 0003c330:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c340:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c350:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c360:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c370:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c380:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003c390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c3a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c3b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c3c0:·3d22·6964·6d38·3031·3322·3e3c·7461·626c··="idm8013"><tabl | |||
| 0003c3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c3f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c410:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c420:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c430:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c440:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c450:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c470:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c490:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003c4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003c4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c4c0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003c4d0:·616c·6c20·6169·6465·0a3c·2f63·6f64·653e··all·aide.</code> | |||
| 0003c4e0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c4f0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c500:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c510:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c520:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003c530:·3031·3422·2074·6162·696e·6465·783d·2230··014"·tabindex="0 | |||
| 0003c540:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c550:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c560:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c570:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003c580:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003c590:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003c5a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c5b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c5c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c5d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c5e0:·2069·643d·2269·646d·3830·3134·223e·3c70···id="idm8014"><p | |||
| 0003c5f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003c600:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003c610:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003c620:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003c630:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| Max diff block lines reached; 11514207/11551771 bytes (99.67%) of diff not shown. | |||
| Offset 133, 14 lines modified | Offset 133, 60 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 161 | if·rpm·--quiet·-q·kernel;·then | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 163 | ····yum·install·-y·"aide" | ||
| 164 | fi | ||
| 165 | else | ||
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 167 | fi | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·--add=aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | dnf·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Gather·the·package·facts | 185 | -·name:·Gather·the·package·facts |
| 146 | ··package_facts: | 186 | ··package_facts: |
| Offset 178, 60 lines modified | Offset 224, 14 lines modified | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | package·install·aide | 229 | package·install·aide |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····yum·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | dnf·install·aide | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 223 | package·--add=aide | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Run·the·following·command·to·generate·a·new·database: | 231 | Run·the·following·command·to·generate·a·new·database: |
| 226 | $·sudo·/usr/sbin/aide·--init | 232 | $·sudo·/usr/sbin/aide·--init |
| 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 233 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 228 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 234 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 229 | To·initiate·a·manual·check,·run·the·following·command: | 235 | To·initiate·a·manual·check,·run·the·following·command: |
| 230 | $·sudo·/usr/sbin/aide·--check | 236 | $·sudo·/usr/sbin/aide·--check |
| Offset 250, 14 lines modified | Offset 250, 28 lines modified | ||
| 250 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 250 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 251 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 251 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 252 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 252 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 253 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 253 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 254 | ············_\x8c_\x8i_\x8s············5.3.1 | 254 | ············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1356756/1361787 bytes (99.63%) of diff not shown. | |||
| Offset 15326, 283 lines modified | Offset 15326, 283 lines modified | ||
| 0003bdd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bdd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bde0:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | 0003bde0:·2369·646d·3830·3132·2220·7461·6269·6e64··#idm8012"·tabind | ||
| 0003bdf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bdf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003be00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003be00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003be10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003be10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003be20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003be20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003be30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003be30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003be40:·5265·6d65·6469·6174·696f·6e20·4 | 0003be40:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003be50:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003be60:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003be70:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003be80:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003be90:·6964·6d38·3031·3222·3e3c·7461·626c·6520··idm8012"><table· | |||
| 0003bea0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003beb0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bec0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bed0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bee0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003bef0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bf00:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003be50:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003be60:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003be70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003be80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003be90:·6170·7365·2220·6964·3d22·6964·6d38·3031··apse"·id="idm801 | |||
| 0003bea0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003beb0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003bec0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003bed0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003bee0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bef0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bf00:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bf10:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bf20:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003bf30:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | |||
| 0003bf40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bf70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bf80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bf90:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003bfa0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bfb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bfc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bfd0:·7073·6522·2069·643d·2269·646d·3830·3133··pse"·id="idm8013 | |||
| 0003bfe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bff0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c000:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c010:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c020:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c030:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003 | 0003c040:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003bf30:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003 | 0003c050:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003c060:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003 | 0003c070:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003c080:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c090:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c0a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c0b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c0c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c0d0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003bf60:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003bf70:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003bf80:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bf90:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003bfa0:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003bfb0:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003bfc0:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003bfd0:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003bfe0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bff0:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003c000:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003c010:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003c020:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003c030:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003c040:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003c050:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c060:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c070:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c080:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c090:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c0a0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c0b0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003c0c0:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003c0d0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003c0e0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c0f0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c100:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003c110:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003c120:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003c130:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003c140:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003c150:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c160:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c170:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c180:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c190:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c1a0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c1b0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c1c0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c1d0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c1e0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c1f0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c200:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c210:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c220:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c230:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c240:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c250:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c260:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c270:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c280:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c290:·2223·6964·6d38·3031·3322·2074·6162·696e··"#idm8013"·tabin | |||
| 0003c2a0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c2b0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c2c0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c2d0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c2e0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c2f0:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003c300:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c310:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c320:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c330:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c340:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c350:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c360:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| Max diff block lines reached; 11209530/11247232 bytes (99.66%) of diff not shown. | |||
| Offset 132, 14 lines modified | Offset 132, 60 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | include·install_aide | ||
| 149 | class·install_aide·{ | ||
| 150 | ··package·{·'aide': | ||
| 151 | ····ensure·=>·'installed', | ||
| 152 | ··} | ||
| 153 | } | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 160 | if·rpm·--quiet·-q·kernel;·then | ||
| 161 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 162 | ····yum·install·-y·"aide" | ||
| 163 | fi | ||
| 164 | else | ||
| 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 166 | fi | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·--add=aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | dnf·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Gather·the·package·facts | 184 | -·name:·Gather·the·package·facts |
| 145 | ··package_facts: | 185 | ··package_facts: |
| Offset 177, 60 lines modified | Offset 223, 14 lines modified | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | package·install·aide | 228 | package·install·aide |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | [[packages]] | ||
| 185 | name·=·"aide" | ||
| 186 | version·=·"*" | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 193 | if·rpm·--quiet·-q·kernel;·then | ||
| 194 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 195 | ····yum·install·-y·"aide" | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | dnf·install·aide | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | include·install_aide | ||
| 212 | class·install_aide·{ | ||
| 213 | ··package·{·'aide': | ||
| 214 | ····ensure·=>·'installed', | ||
| 215 | ··} | ||
| 216 | } | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 222 | package·--add=aide | ||
| 223 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 224 | Run·the·following·command·to·generate·a·new·database: | 230 | Run·the·following·command·to·generate·a·new·database: |
| 225 | $·sudo·/usr/sbin/aide·--init | 231 | $·sudo·/usr/sbin/aide·--init |
| 226 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 232 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 227 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 233 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 228 | To·initiate·a·manual·check,·run·the·following·command: | 234 | To·initiate·a·manual·check,·run·the·following·command: |
| 229 | $·sudo·/usr/sbin/aide·--check | 235 | $·sudo·/usr/sbin/aide·--check |
| Offset 249, 14 lines modified | Offset 249, 28 lines modified | ||
| 249 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 249 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 250 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 250 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 251 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 252 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 253 | ············_\x8c_\x8i_\x8s············5.3.1 | 253 | ············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1317376/1322407 bytes (99.62%) of diff not shown. | |||
| Offset 15365, 282 lines modified | Offset 15365, 282 lines modified | ||
| 0003c040:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | 0003c040:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | ||
| 0003c050:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003c050:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003c060:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003c060:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c070:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003c070:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c080:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003c080:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c090:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003c090:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c0a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003c0a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c0b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003c0b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003c0c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003c0d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c0e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c0f0:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003c100:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c110:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003c120:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003c130:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003c140:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003c150:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003c160:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c170:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003c180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c190:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c1a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003c1b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003c1c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003c1d0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003c1e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003c1f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003c200:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003c210:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003c220:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003c230:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003c240:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003c250:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003c260:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003c270:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003c280:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003c290:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003c2a0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003c2b0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003c2c0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003c2d0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003c2e0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003c2f0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003c300:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003c310:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003c320:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003c330:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003c340:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c350:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c360:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c370:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c380:·656e·740a·2020·7768·656e·3a20·2722·6b65··ent.··when:·'"ke | |||
| 0003c390:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003c3a0:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003c3b0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003c3c0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003c3d0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003c3e0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003c3f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c400:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c410:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c420:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c430:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c440:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c450:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c460:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c470:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c480:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c490:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003c4a0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003c4b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c4c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c4d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c4e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003c4f0:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c500:·3133·2220·7461·6269·6e64·6578·3d22·3022··13"·tabindex="0" | |||
| 0003c510:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c520:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c530:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c540:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c550:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c560:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003c570:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c580:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c590:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c5a0:·2269·646d·3830·3133·223e·3c74·6162·6c65··"idm8013"><table | |||
| 0003c5b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c5c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c5d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c5e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c5f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c600:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c610:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c620:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c630:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c640:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c650:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c660:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c670:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c680:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c690:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c6a0:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003c6b0:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003c6c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003c6d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003c6e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003c6f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003c700:·612d·7461·7267·6574·3d22·2369·646d·3830··a-target="#idm80 | |||
| 0003c710:·3134·2220·7461·6269·6e64·6578·3d22·3022··14"·tabindex="0" | |||
| 0003c720:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003c730:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003c740:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003c750:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003c760:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c770:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c780:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c790:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c7a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c7b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c7c0:·6964·3d22·6964·6d38·3031·3422·3e3c·7072··id="idm8014"><pr | |||
| 0003c7d0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003c7e0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003c7f0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003c800:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003c810:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| Max diff block lines reached; 25934294/25971858 bytes (99.86%) of diff not shown. | |||
| Offset 15357, 282 lines modified | Offset 15357, 282 lines modified | ||
| 0003bfc0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003bfc0:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003bfd0:·3031·3222·2074·6162·696e·6465·783d·2230··012"·tabindex="0 | 0003bfd0:·3031·3222·2074·6162·696e·6465·783d·2230··012"·tabindex="0 | ||
| 0003bfe0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bfe0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bff0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bff0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c000:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c000:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c010:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c010:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c020:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c020:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c030:·6961·7469·6f6e·204 | 0003c030:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003c040:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c050:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c060:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c070:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c080:·3132·223e·3c74·6162·6c65·2063·6c61·7373··12"><table·class | |||
| 0003c090:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c0a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c0b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c0c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c0d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c0e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c0 | 0003c040:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003c050:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c060:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c070:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c080:·2069·643d·2269·646d·3830·3132·223e·3c70···id="idm8012"><p | |||
| 0003c090:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003c0a0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003c0b0:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003c0c0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003c0d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c0e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c0f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c100:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c110:·6765·743d·2223·6964·6d38·3031·3322·2074··get="#idm8013"·t | |||
| 0003c120:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c130:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c140:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c150:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c160:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c170:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c180:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003c190:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c1a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c1b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c1c0:·6964·3d22·6964·6d38·3031·3322·3e3c·7461··id="idm8013"><ta | |||
| 0003c1d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c1e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c1f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c200:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c210:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c | 0003c220:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003c | 0003c230:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c120:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c130:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c | 0003c240:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003c250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c260:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c | 0003c270:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003c280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c290:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c2a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c2b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c2c0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003c2d0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003c2e0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003c2f0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003c300:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003c310:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003c320:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003c160:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c170:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003c180:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003c190:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003c1a0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003c1b0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003c1c0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c1d0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003c1e0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003c1f0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003c200:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003c210:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003c220:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003c230:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003c240:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003c250:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003c260:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003c270:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003c280:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003c290:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003c2a0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003c2b0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003c2c0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003c2d0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003c2e0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003c2f0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003c300:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003c310:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003c320:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003c330:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003c340:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c350:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c360:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c370:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c380:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c390:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c3a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c3b0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c3c0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c3d0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c3e0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c3f0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c400:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c410:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c420:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c430:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c440:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c450:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c460:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c470:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c480:·3830·3133·2220·7461·6269·6e64·6578·3d22··8013"·tabindex=" | |||
| 0003c490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c4a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c4b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c4c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c4d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c4e0:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003c4f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c500:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| Max diff block lines reached; 10010405/10047969 bytes (99.63%) of diff not shown. | |||
| Offset 138, 14 lines modified | Offset 138, 60 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | include·install_aide | ||
| 155 | class·install_aide·{ | ||
| 156 | ··package·{·'aide': | ||
| 157 | ····ensure·=>·'installed', | ||
| 158 | ··} | ||
| 159 | } | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····yum·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | package·--add=aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | dnf·install·aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Gather·the·package·facts | 190 | -·name:·Gather·the·package·facts |
| 151 | ··package_facts: | 191 | ··package_facts: |
| Offset 183, 60 lines modified | Offset 229, 14 lines modified | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | package·install·aide | 234 | package·install·aide |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | [[packages]] | ||
| 191 | name·=·"aide" | ||
| 192 | version·=·"*" | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·rpm·--quiet·-q·kernel;·then | ||
| 200 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 201 | ····yum·install·-y·"aide" | ||
| 202 | fi | ||
| 203 | else | ||
| 204 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 205 | fi | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | dnf·install·aide | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 217 | include·install_aide | ||
| 218 | class·install_aide·{ | ||
| 219 | ··package·{·'aide': | ||
| 220 | ····ensure·=>·'installed', | ||
| 221 | ··} | ||
| 222 | } | ||
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 228 | package·--add=aide | ||
| 229 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 235 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 230 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 236 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 231 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 237 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 232 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 238 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 233 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 239 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 299, 87 lines modified | Offset 299, 107 lines modified | ||
| 299 | $·sudo·yum·install·crypto-policies | 299 | $·sudo·yum·install·crypto-policies |
| 300 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 300 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 301 | Severity: ··medium | 301 | Severity: ··medium |
| 302 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 302 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 303 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 303 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1330182/1335882 bytes (99.57%) of diff not shown. | |||
| Offset 15402, 408 lines modified | Offset 15402, 408 lines modified | ||
| 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c290:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c2a0:·6964·6d37·3637·3322·2074·6162·696e·6465··idm7673"·tabinde | 0003c2a0:·6964·6d37·3637·3322·2074·6162·696e·6465··idm7673"·tabinde | ||
| 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c2b0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c2c0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c2d0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c2e0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c2f0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c300:·656d·6564·6961·7469·6f6e·20 | 0003c300:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003c310:· | 0003c310:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003c320:·6 | 0003c320:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003c330:· | 0003c330:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003c340:· | 0003c340:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003c350:· | 0003c350:·3637·3322·3e3c·7072·653e·3c63·6f64·653e··673"><pre><code> | ||
| 0003c360:· | 0003c360:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003c370:· | 0003c370:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 0003c380:· | 0003c380:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 0003c390:·6 | 0003c390:·666f·726d·730a·6966·2021·2028·207b·2072··forms.if·!·(·{·r | ||
| 0003c3a0:· | 0003c3a0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | ||
| 0003c3b0:· | 0003c3b0:·726e·656c·203b·7d20·2661·6d70·3b26·616d··rnel·;}·&&am | ||
| 0003c3c0:· | 0003c3c0:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003c3d0:· | 0003c3d0:·202d·7120·7270·6d2d·6f73·7472·6565·203b···-q·rpm-ostree·; | ||
| 0003c3e0:· | 0003c3e0:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003c3f0:· | 0003c3f0:·706d·202d·2d71·7569·6574·202d·7120·626f··pm·--quiet·-q·bo | ||
| 0003c400:· | 0003c400:·6f74·6320·3b7d·2026·616d·703b·2661·6d70··otc·;}·&& | ||
| 0003c410:· | 0003c410:·3b20·7b20·2120·7270·6d20·2d2d·7175·6965··;·{·!·rpm·--quie | ||
| 0003c420:·74 | 0003c420:·7420·2d71·206f·7065·6e73·6869·6674·2d6b··t·-q·openshift-k | ||
| 0003c430:· | 0003c430:·7562·656c·6574·203b·7d20·293b·2074·6865··ubelet·;}·);·the | ||
| 0003c440:· | 0003c440:·6e0a·0a23·2046·696e·6420·7768·6963·6820··n..#·Find·which· | ||
| 0003c450:· | 0003c450:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | ||
| 0003c460:·7 | 0003c460:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | ||
| 0003c470:· | 0003c470:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | ||
| 0003c480:· | 0003c480:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | ||
| 0003c490:·6 | 0003c490:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | ||
| 0003c4a0:· | 0003c4a0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | ||
| 0003c4b0:· | 0003c4b0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | ||
| 0003c4c0:· | 0003c4c0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003c4d0:· | 0003c4d0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | ||
| 0003c4e0:· | 0003c4e0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | ||
| 0003c4f0:· | 0003c4f0:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | ||
| 0003c500:· | 0003c500:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | ||
| 0003c510:·2 | 0003c510:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | ||
| 0003c520:· | 0003c520:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003c530:· | 0003c530:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | ||
| 0003c540:· | 0003c540:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | ||
| 0003c550:· | 0003c550:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | ||
| 0003c560:· | 0003c560:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | ||
| 0003c570:· | 0003c570:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | ||
| 0003c580:· | 0003c580:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | ||
| 0003c590:· | 0003c590:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | ||
| 0003c5a0:· | 0003c5a0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | ||
| 0003c5b0:· | 0003c5b0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | ||
| 0003c5c0:· | 0003c5c0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | ||
| 0003c5d0:· | 0003c5d0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | ||
| 0003c5e0:· | 0003c5e0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003c5f0:· | 0003c5f0:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | ||
| 0003c600:·202 | 0003c600:·2027·2922·0a0a·2020·2020·0a20·2020·2079···')"..····.····y | ||
| 0003c610:· | 0003c610:·756d·2072·6569·6e73·7461·6c6c·202d·7920··um·reinstall·-y· | ||
| 0003c620:· | 0003c620:·2470·6163·6b61·6765·735f·746f·5f72·6569··$packages_to_rei | ||
| 0003c630:·6 | 0003c630:·6e73·7461·6c6c·0a20·2020·200a·6669·0a0a··nstall.····.fi.. | ||
| 0003c640:·6 | 0003c640:·656c·7365·0a20·2020·2026·6774·3b26·616d··else.····>&am | ||
| 0003c650:· | 0003c650:·703b·3220·6563·686f·2027·5265·6d65·6469··p;2·echo·'Remedi | ||
| 0003c660:·6 | 0003c660:·6174·696f·6e20·6973·206e·6f74·2061·7070··ation·is·not·app | ||
| 0003c670:·6 | 0003c670:·6c69·6361·626c·652c·206e·6f74·6869·6e67··licable,·nothing | ||
| 0003c680:· | 0003c680:·2077·6173·2064·6f6e·6527·0a66·690a·3c2f···was·done'.fi.</ | ||
| 0003c690:·6 | 0003c690:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003c6a0:· | 0003c6a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003c6b0:· | 0003c6b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003c6c0:· | 0003c6c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003c6d0:·6522·206 | 0003c6d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003c6e0:· | 0003c6e0:·2369·646d·3736·3734·2220·7461·6269·6e64··#idm7674"·tabind | ||
| 0003c6f0:· | 0003c6f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003c700:· | 0003c700:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003c710:·6 | 0003c710:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003c720:· | 0003c720:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003c730:·7 | 0003c730:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003c740:· | 0003c740:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003c750:· | 0003c750:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 0003c760:· | 0003c760:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003c770:· | 0003c770:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003c780:·6 | 0003c780:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003c790:· | 0003c790:·6964·6d37·3637·3422·3e3c·7461·626c·6520··idm7674"><table· | ||
| 0003c7a0:· | 0003c7a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003c7b0:· | 0003c7b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003c7c0:· | 0003c7c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003c7d0:· | 0003c7d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003c7e0:· | 0003c7e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003c7f0:· | 0003c7f0:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | ||
| 0003c800:· | 0003c800:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003c810:· | 0003c810:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003c820:·3 | 0003c820:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003c830:· | 0003c830:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003c840:· | 0003c840:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003c850:· | 0003c850:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c860:· | 0003c860:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0003c870:· | 0003c870:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0003c880:· | 0003c880:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003c890:· | 0003c890:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | ||
| 0003c8a0:· | 0003c8a0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | ||
| 0003c8b0:· | 0003c8b0:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | ||
| 0003c8c0:·6 | 0003c8c0:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | ||
| 0003c8d0:·6 | 0003c8d0:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | ||
| 0003c8e0:· | 0003c8e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | ||
| 0003c8f0:·2 | 0003c8f0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c900:· | 0003c900:·302d·3137·312d·332e·332e·380a·2020·2d20··0-171-3.3.8.··-· | ||
| 0003c910:· | 0003c910:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | ||
| 0003c920:· | 0003c920:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003c930:· | 0003c930:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | ||
| 0003c940:· | 0003c940:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003c950:· | 0003c950:·6329·0a20·202d·204e·4953·542d·3830·302d··c).··-·NIST-800- | ||
| 0003c960:· | 0003c960:·3533·2d43·4d2d·3628·6429·0a20·202d·204e··53-CM-6(d).··-·N | ||
| 0003c970:· | 0003c970:·4953·542d·3830·302d·3533·2d53·492d·370a··IST-800-53-SI-7. | ||
| 0003c980:· | 0003c980:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c990:· | 0003c990:·5349·2d37·2831·290a·2020·2d20·4e49·5354··SI-7(1).··-·NIST | ||
| 0003c9a0:· | 0003c9a0:·2d38·3030·2d35·332d·5349·2d37·2836·290a··-800-53-SI-7(6). | ||
| 0003c9b0:· | 0003c9b0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | ||
| 0003c9c0:· | 0003c9c0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | ||
| 0003c9d0:· | 0003c9d0:·7634·2d31·312e·352e·320a·2020·2d20·6869··v4-11.5.2.··-·hi | ||
| 0003c9e0:·6 | 0003c9e0:·6768·5f63·6f6d·706c·6578·6974·790a·2020··gh_complexity.·· | ||
| 0003c9f0:·2 | 0003c9f0:·2d20·6869·6768·5f73·6576·6572·6974·790a··-·high_severity. | ||
| 0003ca00:· | 0003ca00:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | ||
| 0003ca10:· | 0003ca10:·7074·696f·6e0a·2020·2d20·6e6f·5f72·6562··ption.··-·no_reb | ||
| 0003ca20:·6 | 0003ca20:·6f6f·745f·6e65·6564·6564·0a20·202d·2072··oot_needed.··-·r | ||
| 0003ca30:·6 | 0003ca30:·6573·7472·6963·745f·7374·7261·7465·6779··estrict_strategy | ||
| 0003ca40:· | 0003ca40:·0a20·202d·2072·706d·5f76·6572·6966·795f··.··-·rpm_verify_ | ||
| 0003ca50:· | 0003ca50:·6861·7368·6573·0a0a·2d20·6e61·6d65·3a20··hashes..-·name:· | ||
| 0003ca60:·2 | 0003ca60:·2753·6574·2066·6163·743a·2050·6163·6b61··'Set·fact:·Packa | ||
| Max diff block lines reached; 6736148/6791100 bytes (99.19%) of diff not shown. | |||
| Offset 132, 14 lines modified | Offset 132, 33 lines modified | ||
| 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 132 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 133 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 134 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 143 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 144 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 145 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 146 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 147 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 144 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 145 | ··package_facts: | 158 | ··package_facts: |
| Offset 306, 33 lines modified | Offset 325, 14 lines modified | ||
| 306 | ··-·PCI-DSSv4-11.5.2 | 325 | ··-·PCI-DSSv4-11.5.2 |
| 307 | ··-·high_complexity | 326 | ··-·high_complexity |
| 308 | ··-·high_severity | 327 | ··-·high_severity |
| 309 | ··-·medium_disruption | 328 | ··-·medium_disruption |
| 310 | ··-·no_reboot_needed | 329 | ··-·no_reboot_needed |
| 311 | ··-·restrict_strategy | 330 | ··-·restrict_strategy |
| 312 | ··-·rpm_verify_hashes | 331 | ··-·rpm_verify_hashes |
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 314 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 315 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 316 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 317 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 318 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 319 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 320 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 321 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 322 | fi | ||
| 323 | else | ||
| 324 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 325 | fi | ||
| 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 327 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 333 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 328 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 334 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 329 | run·the·following·command·to·determine·which·package·owns·it: | 335 | run·the·following·command·to·determine·which·package·owns·it: |
| 330 | $·rpm·-qf·FILENAME | 336 | $·rpm·-qf·FILENAME |
| 331 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 337 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 332 | $·sudo·rpm·--restore·PACKAGENAME | 338 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 351, 14 lines modified | Offset 351, 46 lines modified | ||
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 352 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 352 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 355 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 355 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 357 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 357 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 363 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 364 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 365 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 366 | declare·-A·SETPERMS_RPM_DICT | ||
| 367 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 368 | #·is·expected·by·the·RPM·database | ||
| 369 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 370 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 371 | do | ||
| 372 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 373 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 374 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 375 | done | ||
| 376 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 377 | #·correct·values | ||
| 378 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 379 | do | ||
| 380 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 381 | done | ||
| 382 | else | ||
| 383 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 384 | fi | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 363 | -·name:·Gather·the·package·facts | 390 | -·name:·Gather·the·package·facts |
| 364 | ··package_facts: | 391 | ··package_facts: |
| Offset 466, 46 lines modified | Offset 498, 14 lines modified | ||
| 466 | ··-·PCI-DSSv4-11.5.2 | 498 | ··-·PCI-DSSv4-11.5.2 |
| 467 | ··-·high_complexity | 499 | ··-·high_complexity |
| 468 | ··-·high_severity | 500 | ··-·high_severity |
| 469 | ··-·medium_disruption | 501 | ··-·medium_disruption |
| 470 | ··-·no_reboot_needed | 502 | ··-·no_reboot_needed |
| 471 | ··-·restrict_strategy | 503 | ··-·restrict_strategy |
| 472 | ··-·rpm_verify_ownership | 504 | ··-·rpm_verify_ownership |
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 764958/772669 bytes (99.00%) of diff not shown. | |||
| Offset 15428, 408 lines modified | Offset 15428, 408 lines modified | ||
| 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c430:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c440:·2223·6964·6d37·3637·3322·2074·6162·696e··"#idm7673"·tabin | 0003c440:·2223·6964·6d37·3637·3322·2074·6162·696e··"#idm7673"·tabin | ||
| 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c450:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c460:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c470:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c480:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c490:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003c4a0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003c4b0:·6 | 0003c4b0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003c4c0:·3 | 0003c4c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003c4d0:· | 0003c4d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003c4e0:· | 0003c4e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003c4f0:· | 0003c4f0:·6d37·3637·3322·3e3c·7072·653e·3c63·6f64··m7673"><pre><cod | ||
| 0003c500:· | 0003c500:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003c510:·6 | 0003c510:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003c520:·6 | 0003c520:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003c530:· | 0003c530:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003c540:· | 0003c540:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003c550:· | 0003c550:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003c560:· | 0003c560:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003c570:·7 | 0003c570:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003c580:· | 0003c580:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003c590:· | 0003c590:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003c5a0:· | 0003c5a0:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003c5b0:· | 0003c5b0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003c5c0:· | 0003c5c0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003c5d0:· | 0003c5d0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003c5e0:· | 0003c5e0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003c5f0:·6 | 0003c5f0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003c600:· | 0003c600:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003c610:· | 0003c610:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003c620:·6 | 0003c620:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003c630:· | 0003c630:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003c640:·6 | 0003c640:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003c650:· | 0003c650:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003c660:· | 0003c660:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003c670:· | 0003c670:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003c680:· | 0003c680:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003c690:·2 | 0003c690:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003c6a0:· | 0003c6a0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003c6b0:· | 0003c6b0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003c6c0:·2 | 0003c6c0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003c6d0:· | 0003c6d0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003c6e0:· | 0003c6e0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003c6f0:· | 0003c6f0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003c700:· | 0003c700:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003c710:· | 0003c710:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003c720:·2 | 0003c720:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003c730:· | 0003c730:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003c740:·6 | 0003c740:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003c750:· | 0003c750:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003c760:· | 0003c760:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003c770:· | 0003c770:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003c780:·6 | 0003c780:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003c790:·7 | 0003c790:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003c7a0:· | 0003c7a0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003c7b0:· | 0003c7b0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003c7c0:· | 0003c7c0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003c7d0:·6 | 0003c7d0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003c7e0:· | 0003c7e0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003c7f0:· | 0003c7f0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003c800:·6 | 0003c800:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003c810:· | 0003c810:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003c820:·6 | 0003c820:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003c830:· | 0003c830:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003c840:· | 0003c840:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003c850:· | 0003c850:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003c860:· | 0003c860:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003c870:·7 | 0003c870:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003c880:· | 0003c880:·3d22·2369·646d·3736·3734·2220·7461·6269··="#idm7674"·tabi | ||
| 0003c890:· | 0003c890:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003c8a0:· | 0003c8a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003c8b0:· | 0003c8b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003c8c0:· | 0003c8c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003c8d0:· | 0003c8d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003c8e0:· | 0003c8e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003c8f0:· | 0003c8f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003c900:· | 0003c900:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003c910:· | 0003c910:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003c920:· | 0003c920:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003c930:· | 0003c930:·3d22·6964·6d37·3637·3422·3e3c·7461·626c··="idm7674"><tabl | ||
| 0003c940:· | 0003c940:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003c950:· | 0003c950:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003c960:· | 0003c960:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003c970:· | 0003c970:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003c980:·3 | 0003c980:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003c990:· | 0003c990:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003c9a0:· | 0003c9a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c9b0:· | 0003c9b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003c9c0:· | 0003c9c0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003c9d0:· | 0003c9d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003c9e0:· | 0003c9e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003c9f0:·3 | 0003c9f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ca00:· | 0003ca00:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003ca10:· | 0003ca10:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003ca20:· | 0003ca20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003ca30:· | 0003ca30:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003ca40:·20 | 0003ca40:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003ca50:·6 | 0003ca50:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003ca60:·65 | 0003ca60:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003ca70:· | 0003ca70:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003ca80:·6 | 0003ca80:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003ca90:· | 0003ca90:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003caa0:· | 0003caa0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003cab0:· | 0003cab0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003cac0:· | 0003cac0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003cad0:· | 0003cad0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003cae0:·20 | 0003cae0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003caf0:· | 0003caf0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003cb00:· | 0003cb00:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003cb10:· | 0003cb10:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003cb20:· | 0003cb20:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003cb30:· | 0003cb30:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003cb40:· | 0003cb40:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003cb50:· | 0003cb50:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003cb60:· | 0003cb60:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003cb70:· | 0003cb70:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003cb80:· | 0003cb80:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003cb90:· | 0003cb90:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003cba0:· | 0003cba0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003cbb0:· | 0003cbb0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003cbc0:·6 | 0003cbc0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003cbd0:· | 0003cbd0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003cbe0:· | 0003cbe0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003cbf0:·7 | 0003cbf0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003cc00:· | 0003cc00:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 17390009/17444961 bytes (99.68%) of diff not shown. | |||
| Offset 138, 14 lines modified | Offset 138, 33 lines modified | ||
| 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 138 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 139 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 140 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 141 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 143 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 144 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 148 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 149 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 150 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 151 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 152 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 153 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 150 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 151 | ··package_facts: | 164 | ··package_facts: |
| Offset 312, 33 lines modified | Offset 331, 14 lines modified | ||
| 312 | ··-·PCI-DSSv4-11.5.2 | 331 | ··-·PCI-DSSv4-11.5.2 |
| 313 | ··-·high_complexity | 332 | ··-·high_complexity |
| 314 | ··-·high_severity | 333 | ··-·high_severity |
| 315 | ··-·medium_disruption | 334 | ··-·medium_disruption |
| 316 | ··-·no_reboot_needed | 335 | ··-·no_reboot_needed |
| 317 | ··-·restrict_strategy | 336 | ··-·restrict_strategy |
| 318 | ··-·rpm_verify_hashes | 337 | ··-·rpm_verify_hashes |
| 319 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 320 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 321 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 322 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 323 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 324 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 325 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 326 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 327 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 328 | fi | ||
| 329 | else | ||
| 330 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 331 | fi | ||
| 332 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 333 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 339 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 334 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 340 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 335 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 341 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 336 | $·rpm·-qf·FILENAME | 342 | $·rpm·-qf·FILENAME |
| 337 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 343 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 359, 14 lines modified | Offset 359, 50 lines modified | ||
| 359 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 359 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 360 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 361 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 361 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 363 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 363 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 364 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 365 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 371 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 372 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 373 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 374 | declare·-A·SETPERMS_RPM_DICT | ||
| 375 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 376 | #·is·expected·by·the·RPM·database | ||
| 377 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 378 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 379 | do | ||
| 380 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 381 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 382 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 383 | ········do | ||
| 384 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 385 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 386 | ········done | ||
| 387 | done | ||
| 388 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 389 | #·correct·values | ||
| 390 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 391 | do | ||
| 392 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 393 | done | ||
| 394 | else | ||
| 395 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 396 | fi | ||
| 366 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 397 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 367 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 398 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 368 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 399 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 369 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 400 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 370 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 401 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 371 | -·name:·Gather·the·package·facts | 402 | -·name:·Gather·the·package·facts |
| 372 | ··package_facts: | 403 | ··package_facts: |
| Offset 478, 50 lines modified | Offset 514, 14 lines modified | ||
| 478 | ··-·PCI-DSSv4-11.5.2 | 514 | ··-·PCI-DSSv4-11.5.2 |
| 479 | ··-·high_complexity | 515 | ··-·high_complexity |
| 480 | ··-·high_severity | 516 | ··-·high_severity |
| 481 | ··-·medium_disruption | 517 | ··-·medium_disruption |
| 482 | ··-·no_reboot_needed | 518 | ··-·no_reboot_needed |
| 483 | ··-·restrict_strategy | 519 | ··-·restrict_strategy |
| 484 | ··-·rpm_verify_permissions | 520 | ··-·rpm_verify_permissions |
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1381392/1389476 bytes (99.42%) of diff not shown. | |||
| Offset 15437, 408 lines modified | Offset 15437, 408 lines modified | ||
| 0003c4c0:·6574·3d22·2369·646d·3736·3733·2220·7461··et="#idm7673"·ta | 0003c4c0:·6574·3d22·2369·646d·3736·3733·2220·7461··et="#idm7673"·ta | ||
| 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003c4d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003c4e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c4f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c500:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c510:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c520:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c530:· | 0003c530:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003c540:· | 0003c540:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c550:· | 0003c550:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c560:· | 0003c560:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c570:· | 0003c570:·2269·646d·3736·3733·223e·3c70·7265·3e3c··"idm7673"><pre>< | ||
| 0003c580:·6 | 0003c580:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003c590:· | 0003c590:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003c5a0:· | 0003c5a0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003c5b0:· | 0003c5b0:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003c5c0:· | 0003c5c0:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003c5d0:· | 0003c5d0:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003c5e0:· | 0003c5e0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003c5f0:· | 0003c5f0:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003c600:· | 0003c600:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003c610:·3 | 0003c610:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003c620:· | 0003c620:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003c630:· | 0003c630:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003c640:· | 0003c640:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003c650:·6 | 0003c650:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003c660:· | 0003c660:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003c670:· | 0003c670:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003c680:·6 | 0003c680:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003c690:·6 | 0003c690:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003c6a0:·6 | 0003c6a0:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003c6b0:· | 0003c6b0:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003c6c0:· | 0003c6c0:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003c6d0:· | 0003c6d0:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003c6e0:· | 0003c6e0:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003c6f0:· | 0003c6f0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003c700:· | 0003c700:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003c710:· | 0003c710:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003c720:· | 0003c720:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003c730:· | 0003c730:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003c740:· | 0003c740:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003c750:· | 0003c750:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003c760:· | 0003c760:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003c770:· | 0003c770:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003c780:· | 0003c780:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003c790:·2 | 0003c790:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003c7a0:· | 0003c7a0:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003c7b0:· | 0003c7b0:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003c7c0:·2 | 0003c7c0:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003c7d0:· | 0003c7d0:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003c7e0:·6 | 0003c7e0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003c7f0:·6 | 0003c7f0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003c800:· | 0003c800:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003c810:· | 0003c810:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003c820:· | 0003c820:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003c830:· | 0003c830:·2020·2020·7975·6d20·7265·696e·7374·616c······yum·reinstal | ||
| 0003c840:·6 | 0003c840:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003c850:·6 | 0003c850:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003c860:· | 0003c860:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003c870:· | 0003c870:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003c880:· | 0003c880:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003c890:·7 | 0003c890:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003c8a0:· | 0003c8a0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003c8b0:· | 0003c8b0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003c8c0:· | 0003c8c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003c8d0:·6 | 0003c8d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003c8e0:· | 0003c8e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003c8f0:·6 | 0003c8f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003c900:·6 | 0003c900:·6765·743d·2223·6964·6d37·3637·3422·2074··get="#idm7674"·t | ||
| 0003c910:· | 0003c910:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c920:· | 0003c920:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c930:·7 | 0003c930:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c940:· | 0003c940:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c950:·7 | 0003c950:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c960:· | 0003c960:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c970:· | 0003c970:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003c980:· | 0003c980:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003c990:·206 | 0003c990:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003c9a0:· | 0003c9a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003c9b0:· | 0003c9b0:·2069·643d·2269·646d·3736·3734·223e·3c74···id="idm7674"><t | ||
| 0003c9c0:· | 0003c9c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003c9d0:· | 0003c9d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003c9e0:· | 0003c9e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003c9f0:· | 0003c9f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003ca00:·3 | 0003ca00:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003ca10:· | 0003ca10:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003ca20:· | 0003ca20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ca30:· | 0003ca30:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ca40:· | 0003ca40:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003ca50:· | 0003ca50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ca60:· | 0003ca60:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003ca70:· | 0003ca70:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003ca80:· | 0003ca80:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003ca90:· | 0003ca90:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003caa0:·2 | 0003caa0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003cab0:· | 0003cab0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003cac0:· | 0003cac0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003cad0:·6 | 0003cad0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003cae0:· | 0003cae0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003caf0:· | 0003caf0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003cb00:·202 | 0003cb00:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003cb10:· | 0003cb10:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003cb20:·5 | 0003cb20:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003cb30:· | 0003cb30:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003cb40:· | 0003cb40:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003cb50:· | 0003cb50:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003cb60:· | 0003cb60:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003cb70:· | 0003cb70:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003cb80:·2 | 0003cb80:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003cb90:· | 0003cb90:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003cba0:· | 0003cba0:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003cbb0:· | 0003cbb0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003cbc0:·20 | 0003cbc0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003cbd0:· | 0003cbd0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003cbe0:· | 0003cbe0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003cbf0:· | 0003cbf0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003cc00:· | 0003cc00:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003cc10:· | 0003cc10:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003cc20:· | 0003cc20:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003cc30:·6 | 0003cc30:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003cc40:· | 0003cc40:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003cc50:·202 | 0003cc50:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003cc60:·6 | 0003cc60:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003cc70:· | 0003cc70:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003cc80:· | 0003cc80:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003cc90:·5 | 0003cc90:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 10101149/10156101 bytes (99.46%) of diff not shown. | |||
| Offset 139, 14 lines modified | Offset 139, 33 lines modified | ||
| 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 139 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 140 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 141 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 142 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 144 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 149 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 150 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 151 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 152 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 153 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 154 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 155 | fi | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 151 | -·name:·Gather·the·package·facts | 164 | -·name:·Gather·the·package·facts |
| 152 | ··package_facts: | 165 | ··package_facts: |
| Offset 313, 33 lines modified | Offset 332, 14 lines modified | ||
| 313 | ··-·PCI-DSSv4-11.5.2 | 332 | ··-·PCI-DSSv4-11.5.2 |
| 314 | ··-·high_complexity | 333 | ··-·high_complexity |
| 315 | ··-·high_severity | 334 | ··-·high_severity |
| 316 | ··-·medium_disruption | 335 | ··-·medium_disruption |
| 317 | ··-·no_reboot_needed | 336 | ··-·no_reboot_needed |
| 318 | ··-·restrict_strategy | 337 | ··-·restrict_strategy |
| 319 | ··-·rpm_verify_hashes | 338 | ··-·rpm_verify_hashes |
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 322 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 323 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 324 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 325 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 326 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 327 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 328 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 329 | fi | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 340 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 335 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 341 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 336 | run·the·following·command·to·determine·which·package·owns·it: | 342 | run·the·following·command·to·determine·which·package·owns·it: |
| 337 | $·rpm·-qf·FILENAME | 343 | $·rpm·-qf·FILENAME |
| 338 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 344 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 339 | $·sudo·rpm·--restore·PACKAGENAME | 345 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 358, 14 lines modified | Offset 358, 46 lines modified | ||
| 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 358 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 359 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 359 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 363 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 363 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 370 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 371 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 372 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 373 | declare·-A·SETPERMS_RPM_DICT | ||
| 374 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 375 | #·is·expected·by·the·RPM·database | ||
| 376 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 377 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 378 | do | ||
| 379 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 380 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 381 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 382 | done | ||
| 383 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 384 | #·correct·values | ||
| 385 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 386 | do | ||
| 387 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 388 | done | ||
| 389 | else | ||
| 390 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 391 | fi | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 392 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 393 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 394 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 395 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 396 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 370 | -·name:·Gather·the·package·facts | 397 | -·name:·Gather·the·package·facts |
| 371 | ··package_facts: | 398 | ··package_facts: |
| Offset 473, 46 lines modified | Offset 505, 14 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 505 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·high_complexity | 506 | ··-·high_complexity |
| 475 | ··-·high_severity | 507 | ··-·high_severity |
| 476 | ··-·medium_disruption | 508 | ··-·medium_disruption |
| 477 | ··-·no_reboot_needed | 509 | ··-·no_reboot_needed |
| 478 | ··-·restrict_strategy | 510 | ··-·restrict_strategy |
| 479 | ··-·rpm_verify_ownership | 511 | ··-·rpm_verify_ownership |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1064324/1072035 bytes (99.28%) of diff not shown. | |||
| Offset 15330, 282 lines modified | Offset 15330, 282 lines modified | ||
| 0003be10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003be10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003be20:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | 0003be20:·6964·6d38·3031·3222·2074·6162·696e·6465··idm8012"·tabinde | ||
| 0003be30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003be30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003be40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003be40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003be50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003be50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003be60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003be60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003be70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003be70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003be80:·656d·6564·6961·7469·6f6e·204 | 0003be80:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003be90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003bea0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003beb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bec0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bed0:·646d·3830·3132·223e·3c74·6162·6c65·2063··dm8012"><table·c | |||
| 0003bee0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bef0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bf00:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bf10:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bf20:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bf30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003be90:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003bea0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003beb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bec0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bed0:·7073·6522·2069·643d·2269·646d·3830·3132··pse"·id="idm8012 | |||
| 0003bee0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003bef0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003bf00:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003bf10:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003bf20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bf30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bf40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bf50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bf60:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003bf70:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003bf80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bf90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bfa0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bfb0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bfc0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bfd0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003bfe0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bff0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c000:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c010:·7365·2220·6964·3d22·6964·6d38·3031·3322··se"·id="idm8013" | |||
| 0003c020:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c030:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c040:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c050:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c060:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003c070:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003 | 0003c080:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bf70:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003 | 0003c090:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c0a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003 | 0003c0b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003c0c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003c0d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c0e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c0f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c100:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c110:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003bfb0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bfc0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bfd0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003bfe0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003bff0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003c000:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003c010:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003c020:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c030:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c040:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c050:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c060:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c070:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c080:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c090:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c0a0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c0b0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c0c0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003c0d0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003c0e0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003c0f0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003c100:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003c110:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c120:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c130:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c140:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c150:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c160:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003c170:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003c180:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003c190:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003c1a0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003c1b0:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003c1c0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003c1d0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003c1e0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003c1f0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003c200:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003c210:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003c220:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003c230:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003c240:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003c250:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003c260:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003c270:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003c280:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c290:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c2a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c2b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c2c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c2d0:·2369·646d·3830·3133·2220·7461·6269·6e64··#idm8013"·tabind | |||
| 0003c2e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c2f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c300:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c310:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c320:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c330:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003c340:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003c350:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c360:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c370:·6522·2069·643d·2269·646d·3830·3133·223e··e"·id="idm8013"> | |||
| 0003c380:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c390:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c3a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c3b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c3c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 10012613/10050177 bytes (99.63%) of diff not shown. | |||
| Offset 130, 14 lines modified | Offset 130, 60 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·rpm·--quiet·-q·kernel;·then | ||
| 159 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 160 | ····yum·install·-y·"aide" | ||
| 161 | fi | ||
| 162 | else | ||
| 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 164 | fi | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | dnf·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Gather·the·package·facts | 182 | -·name:·Gather·the·package·facts |
| 143 | ··package_facts: | 183 | ··package_facts: |
| Offset 175, 60 lines modified | Offset 221, 14 lines modified | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | package·install·aide | 226 | package·install·aide |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | [[packages]] | ||
| 183 | name·=·"aide" | ||
| 184 | version·=·"*" | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·rpm·--quiet·-q·kernel;·then | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 193 | ····yum·install·-y·"aide" | ||
| 194 | fi | ||
| 195 | else | ||
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 197 | fi | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | dnf·install·aide | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | include·install_aide | ||
| 210 | class·install_aide·{ | ||
| 211 | ··package·{·'aide': | ||
| 212 | ····ensure·=>·'installed', | ||
| 213 | ··} | ||
| 214 | } | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 220 | package·--add=aide | ||
| 221 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 227 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 222 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 228 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 223 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 229 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 224 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 230 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 231 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 87 lines modified | Offset 291, 107 lines modified | ||
| 291 | $·sudo·yum·install·crypto-policies | 291 | $·sudo·yum·install·crypto-policies |
| 292 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 292 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 293 | Severity: ··medium | 293 | Severity: ··medium |
| 294 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 294 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 295 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 295 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1330199/1335899 bytes (99.57%) of diff not shown. | |||
| Offset 15429, 408 lines modified | Offset 15429, 408 lines modified | ||
| 0003c440:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003c440:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003c450:·646d·3736·3733·2220·7461·6269·6e64·6578··dm7673"·tabindex | 0003c450:·646d·3736·3733·2220·7461·6269·6e64·6578··dm7673"·tabindex | ||
| 0003c460:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003c460:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003c470:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003c470:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003c480:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003c480:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003c490:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003c490:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003c4a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003c4a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003c4b0:·6d65·6469·6174·696f·6e20· | 0003c4b0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003c4c0:· | 0003c4c0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003c4d0:· | 0003c4d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003c4e0:· | 0003c4e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003c4f0:·6 | 0003c4f0:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0003c500:· | 0003c500:·3733·223e·3c70·7265·3e3c·636f·6465·3e23··73"><pre><code># | ||
| 0003c510:· | 0003c510:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003c520:· | 0003c520:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003c530:·6 | 0003c530:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003c540:·6 | 0003c540:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | ||
| 0003c550:· | 0003c550:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | ||
| 0003c560:· | 0003c560:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | ||
| 0003c570:· | 0003c570:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003c580:· | 0003c580:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | ||
| 0003c590:· | 0003c590:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003c5a0:· | 0003c5a0:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | ||
| 0003c5b0:·746 | 0003c5b0:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | ||
| 0003c5c0:· | 0003c5c0:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | ||
| 0003c5d0:· | 0003c5d0:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | ||
| 0003c5e0:· | 0003c5e0:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | ||
| 0003c5f0:· | 0003c5f0:·0a0a·2320·4669·6e64·2077·6869·6368·2066··..#·Find·which·f | ||
| 0003c600:·6 | 0003c600:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | ||
| 0003c610:·6 | 0003c610:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | ||
| 0003c620:· | 0003c620:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | ||
| 0003c630:·66 | 0003c630:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | ||
| 0003c640:·6 | 0003c640:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | ||
| 0003c650:· | 0003c650:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | ||
| 0003c660:· | 0003c660:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | ||
| 0003c670:· | 0003c670:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003c680:·5 | 0003c680:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | ||
| 0003c690:· | 0003c690:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | ||
| 0003c6a0:· | 0003c6a0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | ||
| 0003c6b0:· | 0003c6b0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | ||
| 0003c6c0:· | 0003c6c0:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | ||
| 0003c6d0:· | 0003c6d0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003c6e0:· | 0003c6e0:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | ||
| 0003c6f0:· | 0003c6f0:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | ||
| 0003c700:· | 0003c700:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | ||
| 0003c710:· | 0003c710:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | ||
| 0003c720:· | 0003c720:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | ||
| 0003c730:·2 | 0003c730:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | ||
| 0003c740:· | 0003c740:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | ||
| 0003c750:· | 0003c750:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | ||
| 0003c760:·6 | 0003c760:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | ||
| 0003c770:· | 0003c770:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | ||
| 0003c780:· | 0003c780:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | ||
| 0003c790:·7 | 0003c790:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003c7a0:· | 0003c7a0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | ||
| 0003c7b0:·2 | 0003c7b0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | ||
| 0003c7c0:· | 0003c7c0:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | ||
| 0003c7d0:· | 0003c7d0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003c7e0:· | 0003c7e0:·7374·616c·6c0a·2020·2020·0a66·690a·0a65··stall.····.fi..e | ||
| 0003c7f0:·6c | 0003c7f0:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 0003c800:· | 0003c800:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 0003c810:· | 0003c810:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 0003c820:· | 0003c820:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 0003c830:· | 0003c830:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 0003c840:·6 | 0003c840:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003c850:· | 0003c850:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003c860:·6 | 0003c860:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003c870:· | 0003c870:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003c880:·2220·6 | 0003c880:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c890:· | 0003c890:·6964·6d37·3637·3422·2074·6162·696e·6465··idm7674"·tabinde | ||
| 0003c8a0:· | 0003c8a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c8b0:·6 | 0003c8b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c8c0:·6 | 0003c8c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c8d0:· | 0003c8d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c8e0:· | 0003c8e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c8f0:· | 0003c8f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003c900:· | 0003c900:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003c910:· | 0003c910:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003c920:· | 0003c920:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003c930:· | 0003c930:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003c940:· | 0003c940:·646d·3736·3734·223e·3c74·6162·6c65·2063··dm7674"><table·c | ||
| 0003c950:· | 0003c950:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003c960:· | 0003c960:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003c970:· | 0003c970:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003c980:· | 0003c980:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003c990:· | 0003c990:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003c9a0:· | 0003c9a0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003c9b0:·2 | 0003c9b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c9c0:· | 0003c9c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c9d0:· | 0003c9d0:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003c9e0:· | 0003c9e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003c9f0:·2 | 0003c9f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003ca00:· | 0003ca00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003ca10:· | 0003ca10:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003ca20:·3 | 0003ca20:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003ca30:· | 0003ca30:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003ca40:· | 0003ca40:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003ca50:· | 0003ca50:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003ca60:· | 0003ca60:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003ca70:· | 0003ca70:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003ca80:· | 0003ca80:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003ca90:· | 0003ca90:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003caa0:· | 0003caa0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003cab0:· | 0003cab0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003cac0:· | 0003cac0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003cad0:· | 0003cad0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003cae0:· | 0003cae0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003caf0:· | 0003caf0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003cb00:·2 | 0003cb00:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003cb10:· | 0003cb10:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003cb20:· | 0003cb20:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003cb30:· | 0003cb30:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003cb40:· | 0003cb40:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003cb50:· | 0003cb50:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003cb60:· | 0003cb60:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003cb70:· | 0003cb70:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003cb80:· | 0003cb80:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003cb90:·6 | 0003cb90:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003cba0:· | 0003cba0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003cbb0:·202 | 0003cbb0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003cbc0:· | 0003cbc0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003cbd0:·6 | 0003cbd0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003cbe0:·73 | 0003cbe0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003cbf0:· | 0003cbf0:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003cc00:· | 0003cc00:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003cc10:· | 0003cc10:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| Max diff block lines reached; 17698978/17753930 bytes (99.69%) of diff not shown. | |||
| Offset 15363, 282 lines modified | Offset 15363, 282 lines modified | ||
| 0003c020:·6172·6765·743d·2223·6964·6d38·3031·3222··arget="#idm8012" | 0003c020:·6172·6765·743d·2223·6964·6d38·3031·3222··arget="#idm8012" | ||
| 0003c030:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003c030:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c040:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003c040:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c050:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c050:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c060:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c060:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c070:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c070:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c080:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c080:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c090:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003c090:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c0a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c0b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c0c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c0d0:·6522·2069·643d·2269·646d·3830·3132·223e··e"·id="idm8012"> | |||
| 0003c0e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c0f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c100:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c110:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c120:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c130:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c140:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c150:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003c160:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c170:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c180:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c190:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c1a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c1b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c1c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c1d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c1e0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003c1f0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003c200:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003c210:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003c220:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c230:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c240:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c250:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c260:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c270:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c280:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c290:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c2a0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c2b0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003c2c0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003c2d0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003c2e0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003c2f0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003c300:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003c310:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003c320:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003c330:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003c340:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003c350:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003c360:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003c370:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003c380:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003c390:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c3a0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c3b0:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c3c0:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c3d0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c3e0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c3f0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c400:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c410:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c420:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c430:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c440:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c450:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c460:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c470:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c480:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c490:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c4a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c4b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c4c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c4d0:·7461·7267·6574·3d22·2369·646d·3830·3133··target="#idm8013 | |||
| 0003c4e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c4f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c500:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c510:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c520:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c530:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c540:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003c550:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c560:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c570:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c580:·646d·3830·3133·223e·3c74·6162·6c65·2063··dm8013"><table·c | |||
| 0003c590:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c5a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c5b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c5c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c5d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c5e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c5f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c600:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c610:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c620:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c630:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c640:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c650:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c660:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c670:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c680:·0a70·6163·6b61·6765·2069·6e73·7461·6c6c··.package·install | |||
| 0003c690:·2061·6964·650a·3c2f·636f·6465·3e3c·2f70···aide.</code></p | |||
| 0003c6a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c6b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c6c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c6d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c6e0:·7461·7267·6574·3d22·2369·646d·3830·3134··target="#idm8014 | |||
| 0003c6f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c700:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c710:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c720:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c730:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003c740:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c750:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003c760:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003c770:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c780:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c790:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c7a0:·3d22·6964·6d38·3031·3422·3e3c·7072·653e··="idm8014"><pre> | |||
| 0003c7b0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003c7c0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003c7d0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003c7e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c7f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| Max diff block lines reached; 28750920/28788484 bytes (99.87%) of diff not shown. | |||
| Offset 15382, 282 lines modified | Offset 15382, 282 lines modified | ||
| 0003c150:·7461·7267·6574·3d22·2369·646d·3830·3132··target="#idm8012 | 0003c150:·7461·7267·6574·3d22·2369·646d·3830·3132··target="#idm8012 | ||
| 0003c160:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003c160:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003c170:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003c170:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003c180:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003c180:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003c190:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003c190:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003c1a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003c1a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003c1b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003c1b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003c1c0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003c1c0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003c1d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003c1e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c1f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c200:·7365·2220·6964·3d22·6964·6d38·3031·3222··se"·id="idm8012" | |||
| 0003c210:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c220:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c230:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c240:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c250:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003c260:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003c270:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c280:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003c290:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c2a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003c2b0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003c2c0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003c2d0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003c2e0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003c2f0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003c300:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003c310:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003c320:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003c330:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003c340:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003c350:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003c360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003c370:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003c380:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003c390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003c3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003c3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003c3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003c3e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003c3f0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003c400:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003c410:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003c420:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003c430:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003c440:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003c450:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003c460:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003c470:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003c480:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003c490:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003c4a0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003c4b0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003c4c0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003c4d0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003c4e0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003c4f0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003c500:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003c510:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003c520:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003c530:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003c540:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003c550:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003c560:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003c570:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003c580:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003c590:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003c5a0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003c5b0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003c5c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c5d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c5e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c5f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c600:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003c610:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003c620:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c630:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c640:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c650:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c660:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c670:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003c680:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c690:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c6a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c6b0:·6964·6d38·3031·3322·3e3c·7461·626c·6520··idm8013"><table· | |||
| 0003c6c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c6d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c6e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c6f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c700:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c710:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c720:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c730:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c740:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c750:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c760:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c770:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c780:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c790:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c7a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c7b0:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003c7c0:·6c20·6169·6465·0a3c·2f63·6f64·653e·3c2f··l·aide.</code></ | |||
| 0003c7d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c7e0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c7f0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c800:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c810:·2d74·6172·6765·743d·2223·6964·6d38·3031··-target="#idm801 | |||
| 0003c820:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003c830:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c840:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c850:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c860:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c870:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c880:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003c890:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003c8a0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c8b0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c8c0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c8d0:·643d·2269·646d·3830·3134·223e·3c70·7265··d="idm8014"><pre | |||
| 0003c8e0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003c8f0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003c900:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003c910:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003c920:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| Max diff block lines reached; 28593243/28630807 bytes (99.87%) of diff not shown. | |||
| Offset 15178, 279 lines modified | Offset 15178, 279 lines modified | ||
| 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b490:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4a0:·3d22·2369·646d·3733·3331·2220·7461·6269··="#idm7331"·tabi | 0003b4a0:·3d22·2369·646d·3733·3331·2220·7461·6269··="#idm7331"·tabi | ||
| 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b4d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b4e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b4f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b500:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b500:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b510:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b520:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b530:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b540:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b550:·3d22·6964·6d37·3333·3122·3e3c·7461·626c··="idm7331"><tabl | |||
| 0003b560:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b570:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b580:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b590:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b5a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b5b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b5c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b5 | 0003b510:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b520:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b530:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b540:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b550:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b560:·3333·3122·3e3c·7072·653e·3c63·6f64·653e··331"><pre><code> | |||
| 0003b570:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b580:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b590:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b5a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b5b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b5c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b5d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b5e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b5f0:·3733·3332·2220·7461·6269·6e64·6578·3d22··7332"·tabindex=" | |||
| 0003b600:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b610:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b620:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b630:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b640:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b650:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b660:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b670:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b680:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b690:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b6a0:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b6b0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b6c0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b6d0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b6e0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b6f0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b700:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b5f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003b710:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b720:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b730:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b620:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b630:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b640:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b650:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b660:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b670:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b680:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b690:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b6a0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b6c0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b6d0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b6e0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b6f0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b700:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b710:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b720:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b730:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b740:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b750:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b760:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b770:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b780:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b790:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b7a0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b7b0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b7c0:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b7d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b7e0:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b7f0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b800:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b810:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b820:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b830:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b840:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b850:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b860:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b870:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b880:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b890:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b8a0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b8b0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b8c0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b8d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b8e0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b8f0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b900:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b910:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | |||
| 0003b920:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b930:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b940:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b950:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b960:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b970:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b980:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b990:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b9a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b9b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b9c0:·6964·6d37·3333·3222·3e3c·7461·626c·6520··idm7332"><table· | |||
| 0003b9d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b9e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b9f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ba00:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ba10:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ba20:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba30:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003b740:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b | 0003b750:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b760:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b770:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b780:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| Max diff block lines reached; 21224651/21261801 bytes (99.83%) of diff not shown. | |||
| Offset 15184, 278 lines modified | Offset 15184, 278 lines modified | ||
| 0003b4f0:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | 0003b4f0:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | ||
| 0003b500:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b500:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b510:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b510:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b520:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b520:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b530:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b530:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b540:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b540:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b550:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b550:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b560:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b570:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b580:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b590:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5a0:·2069·643d·2269·646d·3733·3331·223e·3c74···id="idm7331"><t | |||
| 0003b5b0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b5c0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b5d0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b5e0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b5f0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b600:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b610:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b560:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b570:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b580:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b590:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5b0:·646d·3733·3331·223e·3c70·7265·3e3c·636f··dm7331"><pre><co | |||
| 0003b5c0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b5d0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b5e0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b5f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b600:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b610:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b620:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b630:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b640:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003b650:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b660:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b670:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b680:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b690:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6a0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b6b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b6d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b6e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b6f0:·6d37·3333·3222·3e3c·7461·626c·6520·636c··m7332"><table·cl | |||
| 0003b700:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b710:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b720:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b730:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b740:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b750:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b640:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b760:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b770:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003b780:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b790:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b7b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b7c0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b7d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b7e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b7f0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b800:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b810:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b820:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b830:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b840:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b850:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b860:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b870:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b880:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b890:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b8a0:·6574·3d22·2369·646d·3733·3333·2220·7461··et="#idm7333"·ta | |||
| 0003b8b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b8c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b8d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b8e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b8f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b900:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b910:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | |||
| 0003b920:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b930:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b940:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b950:·2269·646d·3733·3333·223e·3c74·6162·6c65··"idm7333"><table | |||
| 0003b960:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b970:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b980:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b990:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9a0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b9b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b9c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b9d0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b9e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b9f0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003ba00:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003ba10:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003ba20:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003ba30:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ba40:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003ba50:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | |||
| 0003ba60:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | |||
| 0003ba70:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | |||
| 0003ba80:·6174·666f·726d·730a·6966·2072·706d·202d··atforms.if·rpm·- | |||
| 0003ba90:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | |||
| 0003baa0:·3b20·7468·656e·0a0a·6966·2021·2072·706d··;·then..if·!·rpm | |||
| 0003bab0:·202d·7120·2d2d·7175·6965·7420·2261·6964···-q·--quiet·"aid | |||
| 0003bac0:·6522·203b·2074·6865·6e0a·2020·2020·646e··e"·;·then.····dn | |||
| 0003bad0:·6620·696e·7374·616c·6c20·2d79·2022·6169··f·install·-y·"ai | |||
| 0003bae0:·6465·220a·6669·0a0a·656c·7365·0a20·2020··de".fi..else.··· | |||
| 0003baf0:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | |||
| 0003bb00:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | |||
| 0003bb10:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | |||
| 0003bb20:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | |||
| 0003bb30:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | |||
| 0003bb40:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bb50:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bb60:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bb70:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bb80:·7461·7267·6574·3d22·2369·646d·3733·3334··target="#idm7334 | |||
| 0003bb90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bba0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bbb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bbc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bbd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bbe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bbf0:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003bc00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| Max diff block lines reached; 21516437/21553449 bytes (99.83%) of diff not shown. | |||
| Offset 15174, 279 lines modified | Offset 15174, 279 lines modified | ||
| 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b450:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b460:·6964·6d37·3333·3122·2074·6162·696e·6465··idm7331"·tabinde | 0003b460:·6964·6d37·3333·3122·2074·6162·696e·6465··idm7331"·tabinde | ||
| 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b470:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b480:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b490:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b4a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b4b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4c0:·656d·6564·6961·7469·6f6e·204 | 0003b4c0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b4d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b4e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b4f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b500:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b510:·646d·3733·3331·223e·3c74·6162·6c65·2063··dm7331"><table·c | |||
| 0003b520:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b530:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b540:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b550:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b560:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b570:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b | 0003b4d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b4e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b4f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b500:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b510:·7073·6522·2069·643d·2269·646d·3733·3331··pse"·id="idm7331 | |||
| 0003b520:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b530:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b540:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b550:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b560:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b570:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b580:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b590:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5a0:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | |||
| 0003b5b0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b5c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b5d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b5e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b5f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b600:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b610:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b620:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b630:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b640:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b650:·7365·2220·6964·3d22·6964·6d37·3333·3222··se"·id="idm7332" | |||
| 0003b660:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b670:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b680:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b690:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b6a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b6b0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b6c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b5b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b6d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b6e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b6f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b700:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b5f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b600:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b610:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b620:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b630:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b640:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b650:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b660:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b670:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b680:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b690:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b6a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b6b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b6c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b6d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b6e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b6f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b700:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b710:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b720:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b730:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b740:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b750:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b760:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b770:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b780:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b790:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b7a0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b7b0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b7c0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b7d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b7e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b7f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b800:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b810:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b820:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b830:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b840:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b850:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b860:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b870:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b880:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b890:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b8a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b8b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b8c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b8d0:·7267·6574·3d22·2369·646d·3733·3332·2220··rget="#idm7332"· | |||
| 0003b8e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b8f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b900:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b910:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b920:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b930:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b940:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b950:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b960:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b970:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b980:·3733·3332·223e·3c74·6162·6c65·2063·6c61··7332"><table·cla | |||
| 0003b990:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b9a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b9b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b9c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b9d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b9e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b9f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003ba00:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b710:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b720:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b730:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b740:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b750:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| Max diff block lines reached; 9191642/9228792 bytes (99.60%) of diff not shown. | |||
| Offset 135, 14 lines modified | Offset 135, 60 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·rpm·--quiet·-q·kernel;·then | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 165 | ····dnf·install·-y·"aide" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | dnf·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Gather·the·package·facts | 187 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 188 | ··package_facts: |
| Offset 178, 60 lines modified | Offset 224, 14 lines modified | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | package·install·aide | 229 | package·install·aide |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····dnf·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | dnf·install·aide | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 223 | package·--add=aide | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Run·the·following·command·to·generate·a·new·database: | 231 | Run·the·following·command·to·generate·a·new·database: |
| 226 | $·sudo·/usr/sbin/aide·--init | 232 | $·sudo·/usr/sbin/aide·--init |
| 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 233 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 228 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 234 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 229 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 235 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 230 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 236 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 256, 14 lines modified | Offset 256, 28 lines modified | ||
| 256 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 256 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 257 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 257 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 259 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 259 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 260 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 260 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1053320/1058177 bytes (99.54%) of diff not shown. | |||
| Offset 14855, 294 lines modified | Offset 14855, 294 lines modified | ||
| 0003a060:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003a060:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a070:·2223·6964·6d31·3035·3432·2220·7461·6269··"#idm10542"·tabi | 0003a070:·2223·6964·6d31·3035·3432·2220·7461·6269··"#idm10542"·tabi | ||
| 0003a080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003a080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003a090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003a090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003a0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003a0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003a0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003a0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003a0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003a0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003a0d0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003a0d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003a0e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003a0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a120:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a130:·3035·3432·223e·3c70·7265·3e3c·636f·6465··0542"><pre><code | |||
| 0003a140:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003a0e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a120:·3d22·6964·6d31·3035·3432·223e·3c74·6162··="idm10542"><tab | |||
| 0003a130:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a140:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a150:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a160:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a170:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a180:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a190:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a1a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003a1b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a1c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a1d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a1e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a1f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a200:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003a210:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a220:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003a230:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003a240:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003a250:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003a260:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003a270:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a280:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a290:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a2a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a2b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a2c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a2d0:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a2e0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a2f0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003a300:·456e·7375·7265·2064·6e66·2d61·7574·6f6d··Ensure·dnf-autom | |||
| 0003a310:·6174·6963·2069·7320·696e·7374·616c·6c65··atic·is·installe | |||
| 0003a320:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003a | 0003a150:·616d·6520·3d20·2264·6e66·2d61·7574·6f6d··ame·=·"dnf-autom | ||
| 0003a160:·6174·6963·220a·7665·7273·696f·6e20·3d20··atic".version·=· | |||
| 0003a340:·6174·6963·0a20·2020·2073·7461·7465·3a20··atic.····state:· | |||
| 0003a350:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003a360:·6e6f·7420·2820·226b·6572·6e65·6c22·2069··not·(·"kernel"·i | |||
| 0003a370:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003a380:·7061·636b·6167·6573·2061·6e64·2022·7270··packages·and·"rp | |||
| 0003a390:·6d2d·6f73·7472·6565·2220·696e·2061·6e73··m-ostree"·in·ans | |||
| 0003a3a0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003a3b0:·6765·730a·2020·2020·616e·6420·2262·6f6f··ges.····and·"boo | |||
| 0003a3c0:·7463·2220·696e·2061·6e73·6962·6c65·5f66··tc"·in·ansible_f | |||
| 0003a3d0:·6163·7473·2e70·6163·6b61·6765·7320·616e··acts.packages·an | |||
| 0003a3e0:·6420·6e6f·7420·226f·7065·6e73·6869·6674··d·not·"openshift | |||
| 0003a3f0:·2d6b·7562·656c·6574·2220·696e·2061·6e73··-kubelet"·in·ans | |||
| 0003a400:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003a410:·6765·730a·2020·2020·290a·2020·7461·6773··ges.····).··tags | |||
| 0003a420:·3a0a·2020·2d20·656e·6162·6c65·5f73·7472··:.··-·enable_str | |||
| 0003a430:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003a440:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003a450:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003a460:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003a470:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003a480:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003a490:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 0003a4a0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003a4b0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a4c0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a4d0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a4e0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a4f0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003a500:·3035·3433·2220·7461·6269·6e64·6578·3d22··0543"·tabindex=" | |||
| 0003a510:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003a520:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003a530:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003a540:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003a550:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003a560:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003a570:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a580:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a590:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a5a0:·643d·2269·646d·3130·3534·3322·3e3c·7461··d="idm10543"><ta | |||
| 0003a5b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a5d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a5e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a5f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a600:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a610:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a620:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a630:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a640:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a650:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a660:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a670:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a680:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003a690:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a6a0:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003a6b0:·7374·616c·6c20·646e·662d·6175·746f·6d61··stall·dnf-automa | |||
| 0003a | 0003a170:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003a | 0003a180:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003a | 0003a190:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003a | 0003a1a0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003a | 0003a1b0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003a | 0003a1c0:·7267·6574·3d22·2369·646d·3130·3534·3322··rget="#idm10543" | ||
| 0003a | 0003a1d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003a | 0003a1e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003a | 0003a1f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003a | 0003a200:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003a | 0003a210:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003a | 0003a220:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003a780:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003a790:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003a7a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a | 0003a230:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | ||
| 0003a240:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| Max diff block lines reached; 2813641/2852861 bytes (98.63%) of diff not shown. | |||
| Offset 101, 57 lines modified | Offset 101, 31 lines modified | ||
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Gather·the·package·facts | ||
| 114 | ··package_facts: | ||
| 115 | ····manager:·auto | ||
| 116 | ··tags: | ||
| 117 | ··-·enable_strategy | ||
| 118 | ··-·low_complexity | ||
| 119 | ··-·low_disruption | ||
| 120 | ··-·medium_severity | ||
| 121 | ··-·no_reboot_needed | ||
| 122 | ··-·package_dnf-automatic_installed | ||
| 109 | [[packages]] | ||
| 123 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 124 | ··package: | ||
| 125 | 110 | name·=·"dnf-automatic" | |
| 111 | version·=·"*" | ||
| 126 | ····state:·present | ||
| 127 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 128 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 129 | ansible_facts.packages | ||
| 130 | ····) | ||
| 131 | ··tags: | ||
| 132 | ··-·enable_strategy | ||
| 133 | ··-·low_complexity | ||
| 134 | ··-·low_disruption | ||
| 135 | ··-·medium_severity | ||
| 136 | ··-·no_reboot_needed | ||
| 137 | ··-·package_dnf-automatic_installed | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_dnf-automatic | ||
| 118 | class·install_dnf-automatic·{ | ||
| 143 | package· | 119 | ··package·{·'dnf-automatic': |
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"dnf-automatic" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 128 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 160, 40 lines modified | Offset 134, 66 lines modified | ||
| 160 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 161 | ····dnf·install·-y·"dnf-automatic" | 135 | ····dnf·install·-y·"dnf-automatic" |
| 162 | fi | 136 | fi |
| 163 | else | 137 | else |
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 165 | fi | 139 | fi |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=dnf-automatic | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | dnf·install·dnf-automatic | 151 | dnf·install·dnf-automatic |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | 157 | -·name:·Gather·the·package·facts | |
| 158 | ··package_facts: | ||
| 159 | ····manager:·auto | ||
| 160 | ··tags: | ||
| 161 | ··-·enable_strategy | ||
| 162 | ··-·low_complexity | ||
| 163 | ··-·low_disruption | ||
| 164 | ··-·medium_severity | ||
| 165 | ··-·no_reboot_needed | ||
| 166 | ··-·package_dnf-automatic_installed | ||
| 178 | class·install_dnf-automatic·{ | ||
| 179 | ··package·{·'dnf-automatic': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | 167 | -·name:·Ensure·dnf-automatic·is·installed | |
| 168 | ··package: | ||
| 169 | ····name:·dnf-automatic | ||
| 170 | ····state:·present | ||
| 171 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 172 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 173 | ansible_facts.packages | ||
| 174 | ····) | ||
| 175 | ··tags: | ||
| 176 | ··-·enable_strategy | ||
| 177 | ··-·low_complexity | ||
| 178 | ··-·low_disruption | ||
| 179 | ··-·medium_severity | ||
| 180 | ··-·no_reboot_needed | ||
| 181 | ··-·package_dnf-automatic_installed | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 196105/200726 bytes (97.70%) of diff not shown. | |||
| Offset 15225, 278 lines modified | Offset 15225, 278 lines modified | ||
| 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | 0003b780:·2d74·6172·6765·743d·2223·6964·6d37·3333··-target="#idm733 | ||
| 0003b790:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003b790:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b7a0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b7b0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b7c0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b7d0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b7e0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b7f0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b800:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b810:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b820:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b830:·7073·6522·2069·643d·2269·646d·3733·3331··pse"·id="idm7331 | |||
| 0003b840:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b850:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b860:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b870:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b880:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b890:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b8a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b | 0003b7f0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b800:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b810:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b820:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b830:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b840:·643d·2269·646d·3733·3331·223e·3c70·7265··d="idm7331"><pre | |||
| 0003b850:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b860:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b870:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b880:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b890:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b8a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b8b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b8c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b8d0:·743d·2223·6964·6d37·3333·3222·2074·6162··t="#idm7332"·tab | |||
| 0003b8e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b8f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b900:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b910:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b920:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b930:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b940:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b950:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b960:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b970:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b980:·3d22·6964·6d37·3333·3222·3e3c·7461·626c··="idm7332"><tabl | |||
| 0003b990:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b9a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b9b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b9c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b9d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b9e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b9f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003ba00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003ba10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003ba20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003ba30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b920:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b930:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b940:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b950:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b960:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b970:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b980:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b990:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b9a0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b9b0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b9c0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b9d0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b9e0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b9f0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ba00:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ba10:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ba20:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ba30:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ba40:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003ba50:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003ba60:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ba70:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ba80:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ba90:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003baa0:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bab0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bac0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bad0:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bae0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003baf0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bb00:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bb10:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bb20:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bb30:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bb40:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bb50:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb60:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb70:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb80:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb90:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bba0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003bbb0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bbc0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bbd0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bbe0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bbf0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bc00:·2369·646d·3733·3332·2220·7461·6269·6e64··#idm7332"·tabind | |||
| 0003bc10:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bc20:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bc30:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bc40:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bc50:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bc60:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003bc70:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003bc80:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc90:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bca0:·6522·2069·643d·2269·646d·3733·3332·223e··e"·id="idm7332"> | |||
| 0003bcb0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bcc0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bcd0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bce0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bcf0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bd00:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bd10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bd20:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003bd30:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b | 0003ba40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003ba50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ba60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ba70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba80:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| Max diff block lines reached; 24231825/24268837 bytes (99.85%) of diff not shown. | |||
| Offset 15187, 278 lines modified | Offset 15187, 278 lines modified | ||
| 0003b520:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | 0003b520:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | ||
| 0003b530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b590:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b5a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b5b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b5c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b5d0:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | |||
| 0003b5e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b5f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b600:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b610:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b620:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b630:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b640:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b590:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b5a0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b5b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b5c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5e0:·6d37·3333·3122·3e3c·7072·653e·3c63·6f64··m7331"><pre><cod | |||
| 0003b5f0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b600:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b610:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b620:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b630:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b640:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b650:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b660:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b670:·646d·3733·3332·2220·7461·6269·6e64·6578··dm7332"·tabindex | |||
| 0003b680:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b690:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b6a0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b6b0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b6c0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b6d0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b6e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b6f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b700:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b710:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b720:·3733·3332·223e·3c74·6162·6c65·2063·6c61··7332"><table·cla | |||
| 0003b730:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b740:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b750:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b760:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b770:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b780:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b670:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003b790:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b7a0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b7b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b7c0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b7d0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b7e0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b7f0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b800:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b810:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b820:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b830:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b840:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b850:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b860:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b870:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b880:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b890:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b8a0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b8b0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b8c0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b8d0:·743d·2223·6964·6d37·3333·3322·2074·6162··t="#idm7333"·tab | |||
| 0003b8e0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b8f0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b900:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b910:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b920:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b930:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0003b940:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0003b950:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b960:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b970:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b980:·6964·6d37·3333·3322·3e3c·7461·626c·6520··idm7333"><table· | |||
| 0003b990:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b9a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b9b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b9c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b9d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b9e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b9f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003ba00:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003ba10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ba20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003ba30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003ba40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ba50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ba60:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ba70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ba80:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0003ba90:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0003baa0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0003bab0:·7466·6f72·6d73·0a69·6620·7270·6d20·2d2d··tforms.if·rpm·-- | |||
| 0003bac0:·7175·6965·7420·2d71·206b·6572·6e65·6c3b··quiet·-q·kernel; | |||
| 0003bad0:·2074·6865·6e0a·0a69·6620·2120·7270·6d20···then..if·!·rpm· | |||
| 0003bae0:·2d71·202d·2d71·7569·6574·2022·6169·6465··-q·--quiet·"aide | |||
| 0003baf0:·2220·3b20·7468·656e·0a20·2020·2064·6e66··"·;·then.····dnf | |||
| 0003bb00:·2069·6e73·7461·6c6c·202d·7920·2261·6964···install·-y·"aid | |||
| 0003bb10:·6522·0a66·690a·0a65·6c73·650a·2020·2020··e".fi..else.···· | |||
| 0003bb20:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | |||
| 0003bb30:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | |||
| 0003bb40:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | |||
| 0003bb50:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | |||
| 0003bb60:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | |||
| 0003bb70:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bb80:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bb90:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bba0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bbb0:·6172·6765·743d·2223·6964·6d37·3333·3422··arget="#idm7334" | |||
| 0003bbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bc20:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 0003bc30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| Max diff block lines reached; 11113294/11150306 bytes (99.67%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 60 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 148 | if·rpm·--quiet·-q·kernel;·then | ||
| 149 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 150 | ····dnf·install·-y·"aide" | ||
| 151 | fi | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·--add=aide | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | dnf·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Gather·the·package·facts | 172 | -·name:·Gather·the·package·facts |
| 133 | ··package_facts: | 173 | ··package_facts: |
| Offset 163, 60 lines modified | Offset 209, 14 lines modified | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | package·install·aide | 214 | package·install·aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····dnf·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | dnf·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | Run·the·following·command·to·generate·a·new·database: | 216 | Run·the·following·command·to·generate·a·new·database: |
| 211 | $·sudo·/usr/sbin/aide·--init | 217 | $·sudo·/usr/sbin/aide·--init |
| 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 219 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 214 | To·initiate·a·manual·check,·run·the·following·command: | 220 | To·initiate·a·manual·check,·run·the·following·command: |
| 215 | $·sudo·/usr/sbin/aide·--check | 221 | $·sudo·/usr/sbin/aide·--check |
| Offset 234, 14 lines modified | Offset 234, 28 lines modified | ||
| 234 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 234 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 235 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 236 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 237 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1309745/1314751 bytes (99.62%) of diff not shown. | |||
| Offset 15178, 278 lines modified | Offset 15178, 278 lines modified | ||
| 0003b490:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | 0003b490:·6765·743d·2223·6964·6d37·3333·3122·2074··get="#idm7331"·t | ||
| 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b500:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b510:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b520:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b530:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5 | 0003b500:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b510:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b520:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b530:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b540:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b550:·646d·3733·3331·223e·3c70·7265·3e3c·636f··dm7331"><pre><co | |||
| 0003b560:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b570:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b580:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b590:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b5 | 0003b5a0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b560:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b570:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b580:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b590:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b5a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b5b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b5 | 0003b5b0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b5c0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b5d0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b5e0:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003b5f0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b600:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b610:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b620:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b630:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b640:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b650:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b660:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b670:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b680:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b690:·6d37·3333·3222·3e3c·7461·626c·6520·636c··m7332"><table·cl | |||
| 0003b6a0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b6b0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b6c0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b6d0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b6e0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b6f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b5e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b700:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b710:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003b720:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b730:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b610:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b620:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b630:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b640:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b650:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b660:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b670:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b680:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b690:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b6a0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b6b0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b6c0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b6d0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b6e0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b6f0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b700:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b710:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b720:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b730:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b740:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b750:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b760:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b770:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b780:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b790:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b7a0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b7b0:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003b7c0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003b7d0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003b7e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b7f0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b800:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b810:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b820:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b830:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b840:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b850:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b860:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b870:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b880:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b890:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b8a0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b8b0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b8c0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b8d0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b8e0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b8f0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b900:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b910:·3733·3332·2220·7461·6269·6e64·6578·3d22··7332"·tabindex=" | |||
| 0003b920:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b930:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b940:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b950:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b960:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b970:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003b980:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b990:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b9a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b9b0:·643d·2269·646d·3733·3332·223e·3c74·6162··d="idm7332"><tab | |||
| 0003b9c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b9d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b9e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b9f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ba00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ba10:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ba20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ba30:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b740:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b750:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b760:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b770:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b780:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b790:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| Max diff block lines reached; 10732302/10769314 bytes (99.66%) of diff not shown. | |||
| Offset 118, 14 lines modified | Offset 118, 60 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | dnf·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Gather·the·package·facts | 170 | -·name:·Gather·the·package·facts |
| 131 | ··package_facts: | 171 | ··package_facts: |
| Offset 161, 60 lines modified | Offset 207, 14 lines modified | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | package·install·aide | 212 | package·install·aide |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·rpm·--quiet·-q·kernel;·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····dnf·install·-y·"aide" | ||
| 180 | fi | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | dnf·install·aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | include·install_aide | ||
| 196 | class·install_aide·{ | ||
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 214 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/sbin/aide·--init | 215 | $·sudo·/usr/sbin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 211 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 212 | To·initiate·a·manual·check,·run·the·following·command: | 218 | To·initiate·a·manual·check,·run·the·following·command: |
| 213 | $·sudo·/usr/sbin/aide·--check | 219 | $·sudo·/usr/sbin/aide·--check |
| Offset 232, 14 lines modified | Offset 232, 28 lines modified | ||
| 232 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 232 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 233 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 235 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 235 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 236 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 236 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1257304/1262310 bytes (99.60%) of diff not shown. | |||
| Offset 15216, 279 lines modified | Offset 15216, 279 lines modified | ||
| 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b6f0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b700:·646d·3733·3331·2220·7461·6269·6e64·6578··dm7331"·tabindex | 0003b700:·646d·3733·3331·2220·7461·6269·6e64·6578··dm7331"·tabindex | ||
| 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b710:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b720:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b730:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b740:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b750:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b760:·6d65·6469·6174·696f·6e20·4 | 0003b760:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b770:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b780:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b790:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b7a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b7b0:·6d37·3333·3122·3e3c·7461·626c·6520·636c··m7331"><table·cl | |||
| 0003b7c0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b7d0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b7e0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b7f0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b800:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b810:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b770:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b780:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b790:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b7a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b7b0:·7365·2220·6964·3d22·6964·6d37·3333·3122··se"·id="idm7331" | |||
| 0003b7c0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b7d0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b7e0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b7f0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b800:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b810:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b820:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b830:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b840:·7461·7267·6574·3d22·2369·646d·3733·3332··target="#idm7332 | |||
| 0003b850:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b860:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b870:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b880:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b890:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b8a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b8b0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b8c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b8d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8f0:·6522·2069·643d·2269·646d·3733·3332·223e··e"·id="idm7332"> | |||
| 0003b900:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b910:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b920:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b930:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b940:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b950:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b960:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b970:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b850:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b860:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b870:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b880:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b890:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b8a0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b8b0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b8c0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b8d0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b8e0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b8f0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b900:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b910:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b920:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b930:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b940:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b950:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b960:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b970:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b980:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b990:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b9a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b9b0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b9c0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b9d0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b9e0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b9f0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003ba00:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003ba10:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ba20:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003ba30:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003ba40:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003ba50:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003ba60:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003ba70:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003ba80:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003ba90:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003baa0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003bab0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003bac0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003bad0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003bae0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003baf0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003bb00:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003bb10:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003bb20:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003bb30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bb40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bb50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bb60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bb70:·6765·743d·2223·6964·6d37·3333·3222·2074··get="#idm7332"·t | |||
| 0003bb80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bb90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bba0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bbb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bbc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bbd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bbe0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003bbf0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bc00:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bc10:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003bc20:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003bc30:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bc40:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bc50:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bc60:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bc70:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b | 0003b980:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b990:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b | 0003b9a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b | 0003b9b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b9c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b9d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b9e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b9f0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| Max diff block lines reached; 24056624/24093774 bytes (99.85%) of diff not shown. | |||
| Offset 15267, 408 lines modified | Offset 15267, 408 lines modified | ||
| 0003ba20:·7267·6574·3d22·2369·646d·3639·3933·2220··rget="#idm6993"· | 0003ba20:·7267·6574·3d22·2369·646d·3639·3933·2220··rget="#idm6993"· | ||
| 0003ba30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003ba30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ba40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003ba40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003ba50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003ba50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ba60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003ba60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ba70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003ba70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003ba80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003ba80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ba90:·6e20· | 0003ba90:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003baa0:· | 0003baa0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003bab0:· | 0003bab0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003bac0:·6 | 0003bac0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003bad0:· | 0003bad0:·643d·2269·646d·3639·3933·223e·3c70·7265··d="idm6993"><pre | ||
| 0003bae0:· | 0003bae0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003baf0:· | 0003baf0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003bb00:· | 0003bb00:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003bb10:· | 0003bb10:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003bb20:· | 0003bb20:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003bb30:· | 0003bb30:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003bb40:·6 | 0003bb40:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003bb50:· | 0003bb50:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003bb60:·7 | 0003bb60:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003bb70:·6 | 0003bb70:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003bb80:· | 0003bb80:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003bb90:·6 | 0003bb90:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003bba0:· | 0003bba0:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003bbb0:· | 0003bbb0:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003bbc0:· | 0003bbc0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003bbd0:· | 0003bbd0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003bbe0:·6 | 0003bbe0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003bbf0:· | 0003bbf0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003bc00:· | 0003bc00:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003bc10:· | 0003bc10:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003bc20:· | 0003bc20:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003bc30:· | 0003bc30:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003bc40:· | 0003bc40:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003bc50:· | 0003bc50:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003bc60:· | 0003bc60:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003bc70:· | 0003bc70:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003bc80:· | 0003bc80:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003bc90:· | 0003bc90:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003bca0:·5 | 0003bca0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003bcb0:· | 0003bcb0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003bcc0:·2 | 0003bcc0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003bcd0:· | 0003bcd0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003bce0:·2 | 0003bce0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003bcf0:· | 0003bcf0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003bd00:· | 0003bd00:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003bd10:· | 0003bd10:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003bd20:· | 0003bd20:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003bd30:· | 0003bd30:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003bd40:· | 0003bd40:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003bd50:· | 0003bd50:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003bd60:· | 0003bd60:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003bd70:· | 0003bd70:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003bd80:· | 0003bd80:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003bd90:· | 0003bd90:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | ||
| 0003bda0:·6 | 0003bda0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003bdb0:· | 0003bdb0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003bdc0:·20 | 0003bdc0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003bdd0:· | 0003bdd0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003bde0:·2 | 0003bde0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003bdf0:·6 | 0003bdf0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003be00:·6 | 0003be00:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003be10:·20 | 0003be10:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003be20:·6 | 0003be20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003be30:· | 0003be30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003be40:·7 | 0003be40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003be50:·6 | 0003be50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003be60:·6 | 0003be60:·6172·6765·743d·2223·6964·6d36·3939·3422··arget="#idm6994" | ||
| 0003be70:· | 0003be70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003be80:· | 0003be80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003be90:· | 0003be90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bea0:· | 0003bea0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003beb0:· | 0003beb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bec0:·6 | 0003bec0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bed0:·6 | 0003bed0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003bee0:· | 0003bee0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003bef0:·6 | 0003bef0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003bf00:· | 0003bf00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003bf10:· | 0003bf10:·6522·2069·643d·2269·646d·3639·3934·223e··e"·id="idm6994"> | ||
| 0003bf20:· | 0003bf20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003bf30:· | 0003bf30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003bf40:· | 0003bf40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003bf50:·2 | 0003bf50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003bf60:· | 0003bf60:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003bf70:· | 0003bf70:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003bf80:· | 0003bf80:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003bf90:·3 | 0003bf90:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003bfa0:·2 | 0003bfa0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003bfb0:· | 0003bfb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bfc0:· | 0003bfc0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bfd0:· | 0003bfd0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003bfe0:· | 0003bfe0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003bff0:·3 | 0003bff0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003c000:·43 | 0003c000:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003c010:· | 0003c010:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003c020:· | 0003c020:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003c030:· | 0003c030:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003c040:· | 0003c040:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003c050:· | 0003c050:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003c060:· | 0003c060:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003c070:· | 0003c070:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003c080:· | 0003c080:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003c090:· | 0003c090:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003c0a0:· | 0003c0a0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003c0b0:· | 0003c0b0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003c0c0:· | 0003c0c0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c0d0:· | 0003c0d0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003c0e0:· | 0003c0e0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003c0f0:·2 | 0003c0f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c100:· | 0003c100:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003c110:· | 0003c110:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003c120:· | 0003c120:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c130:· | 0003c130:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003c140:· | 0003c140:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003c150:· | 0003c150:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003c160:· | 0003c160:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003c170:· | 0003c170:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003c180:· | 0003c180:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003c190:· | 0003c190:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003c1a0:· | 0003c1a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003c1b0:·6 | 0003c1b0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003c1c0:· | 0003c1c0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003c1d0:·6 | 0003c1d0:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003c1e0:· | 0003c1e0:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c1f0:· | 0003c1f0:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| Max diff block lines reached; 6337516/6392468 bytes (99.14%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 120 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 121 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 121 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 130 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 131 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 132 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 133 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 134 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 135 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 132 | -·name:·Gather·the·package·facts | 145 | -·name:·Gather·the·package·facts |
| 133 | ··package_facts: | 146 | ··package_facts: |
| Offset 294, 33 lines modified | Offset 313, 14 lines modified | ||
| 294 | ··-·PCI-DSSv4-11.5.2 | 313 | ··-·PCI-DSSv4-11.5.2 |
| 295 | ··-·high_complexity | 314 | ··-·high_complexity |
| 296 | ··-·high_severity | 315 | ··-·high_severity |
| 297 | ··-·medium_disruption | 316 | ··-·medium_disruption |
| 298 | ··-·no_reboot_needed | 317 | ··-·no_reboot_needed |
| 299 | ··-·restrict_strategy | 318 | ··-·restrict_strategy |
| 300 | ··-·rpm_verify_hashes | 319 | ··-·rpm_verify_hashes |
| 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 302 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 303 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 304 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 305 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 306 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 307 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 308 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 309 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 310 | fi | ||
| 311 | else | ||
| 312 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 313 | fi | ||
| 314 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 320 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 315 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 321 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 316 | ····*·GnuTLS·library | 322 | ····*·GnuTLS·library |
| 317 | ····*·OpenSSL·library | 323 | ····*·OpenSSL·library |
| 318 | ····*·NSS·library | 324 | ····*·NSS·library |
| 319 | ····*·OpenJDK | 325 | ····*·OpenJDK |
| 320 | ····*·Libkrb5 | 326 | ····*·Libkrb5 |
| Offset 341, 14 lines modified | Offset 341, 58 lines modified | ||
| 341 | ············_\x8i_\x8s_\x8m······1446 | 341 | ············_\x8i_\x8s_\x8m······1446 |
| 342 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 342 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 343 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 343 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 344 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 344 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 346 | ············_\x8c_\x8i_\x8s······1.6.1 | 346 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 347 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 347 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 349 | var_system_crypto_policy='DEFAULT' | ||
| 350 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 351 | rc=$? | ||
| 352 | if·test·"$rc"·=·127;·then | ||
| 353 | » echo·"$stderr_of_call"·>&2 | ||
| 354 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 355 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 356 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 357 | » false··#·end·with·an·error·code | ||
| 358 | elif·test·"$rc"·!=·0;·then | ||
| 359 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 360 | » false··#·end·with·an·error·code | ||
| 361 | fi | ||
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 367 | --- | ||
| 368 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 369 | kind:·MachineConfig | ||
| 370 | spec: | ||
| 371 | ··config: | ||
| 372 | ····ignition: | ||
| 373 | ······version:·3.1.0 | ||
| 374 | ····systemd: | ||
| 375 | ······units: | ||
| 376 | ········-·name:·configure-crypto-policy.service | ||
| 377 | ··········enabled:·true | ||
| 378 | ··········contents:·| | ||
| 379 | ············[Unit] | ||
| 380 | ············Before=kubelet.service | ||
| 381 | ············[Service] | ||
| 382 | ············Type=oneshot | ||
| 383 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 384 | ············RemainAfterExit=yes | ||
| 385 | ············[Install] | ||
| 386 | ············WantedBy=multi-user.target | ||
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 353 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 392 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 354 | ··set_fact: | 393 | ··set_fact: |
| Offset 393, 72 lines modified | Offset 437, 33 lines modified | ||
| Max diff block lines reached; 713819/719768 bytes (99.17%) of diff not shown. | |||
| Offset 15293, 408 lines modified | Offset 15293, 408 lines modified | ||
| 0003bbc0:·6574·3d22·2369·646d·3639·3933·2220·7461··et="#idm6993"·ta | 0003bbc0:·6574·3d22·2369·646d·3639·3933·2220·7461··et="#idm6993"·ta | ||
| 0003bbd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bbd0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bbe0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bbe0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003bbf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003bbf0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003bc00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003bc00:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003bc10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003bc10:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003bc20:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003bc30:· | 0003bc30:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003bc40:· | 0003bc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003bc50:· | 0003bc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003bc60:· | 0003bc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003bc70:· | 0003bc70:·2269·646d·3639·3933·223e·3c70·7265·3e3c··"idm6993"><pre>< | ||
| 0003bc80:·6 | 0003bc80:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003bc90:· | 0003bc90:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003bca0:· | 0003bca0:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003bcb0:· | 0003bcb0:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003bcc0:· | 0003bcc0:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003bcd0:· | 0003bcd0:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003bce0:· | 0003bce0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003bcf0:· | 0003bcf0:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003bd00:· | 0003bd00:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003bd10:·3 | 0003bd10:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003bd20:· | 0003bd20:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003bd30:· | 0003bd30:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003bd40:· | 0003bd40:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003bd50:·6 | 0003bd50:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003bd60:· | 0003bd60:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003bd70:· | 0003bd70:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003bd80:·6 | 0003bd80:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003bd90:·6 | 0003bd90:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003bda0:·6 | 0003bda0:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003bdb0:· | 0003bdb0:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003bdc0:· | 0003bdc0:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003bdd0:· | 0003bdd0:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003bde0:· | 0003bde0:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003bdf0:· | 0003bdf0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003be00:· | 0003be00:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003be10:· | 0003be10:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003be20:· | 0003be20:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003be30:· | 0003be30:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003be40:· | 0003be40:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003be50:· | 0003be50:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003be60:· | 0003be60:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003be70:· | 0003be70:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003be80:· | 0003be80:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003be90:·2 | 0003be90:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003bea0:· | 0003bea0:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003beb0:· | 0003beb0:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003bec0:·2 | 0003bec0:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003bed0:· | 0003bed0:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003bee0:·6 | 0003bee0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003bef0:·6 | 0003bef0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003bf00:· | 0003bf00:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003bf10:· | 0003bf10:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003bf20:· | 0003bf20:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003bf30:· | 0003bf30:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | ||
| 0003bf40:·6 | 0003bf40:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003bf50:·6 | 0003bf50:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003bf60:· | 0003bf60:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003bf70:· | 0003bf70:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003bf80:· | 0003bf80:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003bf90:·7 | 0003bf90:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003bfa0:· | 0003bfa0:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003bfb0:· | 0003bfb0:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003bfc0:· | 0003bfc0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003bfd0:·6 | 0003bfd0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003bfe0:· | 0003bfe0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003bff0:·6 | 0003bff0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003c000:·6 | 0003c000:·6765·743d·2223·6964·6d36·3939·3422·2074··get="#idm6994"·t | ||
| 0003c010:· | 0003c010:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c020:· | 0003c020:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c030:·7 | 0003c030:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c040:· | 0003c040:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c050:·7 | 0003c050:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c060:· | 0003c060:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c070:· | 0003c070:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003c080:· | 0003c080:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003c090:·206 | 0003c090:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003c0a0:· | 0003c0a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003c0b0:· | 0003c0b0:·2069·643d·2269·646d·3639·3934·223e·3c74···id="idm6994"><t | ||
| 0003c0c0:· | 0003c0c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003c0d0:· | 0003c0d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003c0e0:· | 0003c0e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003c0f0:· | 0003c0f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003c100:·3 | 0003c100:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003c110:· | 0003c110:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003c120:· | 0003c120:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c130:· | 0003c130:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003c140:· | 0003c140:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003c150:· | 0003c150:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003c160:· | 0003c160:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003c170:· | 0003c170:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003c180:· | 0003c180:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003c190:· | 0003c190:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003c1a0:·2 | 0003c1a0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003c1b0:· | 0003c1b0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003c1c0:· | 0003c1c0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003c1d0:·6 | 0003c1d0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003c1e0:· | 0003c1e0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003c1f0:· | 0003c1f0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003c200:·202 | 0003c200:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003c210:· | 0003c210:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003c220:·5 | 0003c220:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003c230:· | 0003c230:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003c240:· | 0003c240:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003c250:· | 0003c250:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003c260:· | 0003c260:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c270:· | 0003c270:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003c280:·2 | 0003c280:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003c290:· | 0003c290:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c2a0:· | 0003c2a0:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003c2b0:· | 0003c2b0:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003c2c0:·20 | 0003c2c0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c2d0:· | 0003c2d0:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003c2e0:· | 0003c2e0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003c2f0:· | 0003c2f0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003c300:· | 0003c300:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003c310:· | 0003c310:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003c320:· | 0003c320:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003c330:·6 | 0003c330:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003c340:· | 0003c340:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003c350:·202 | 0003c350:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003c360:·6 | 0003c360:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003c370:· | 0003c370:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003c380:· | 0003c380:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003c390:·5 | 0003c390:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 19380776/19435728 bytes (99.72%) of diff not shown. | |||
| Offset 15203, 279 lines modified | Offset 15203, 279 lines modified | ||
| 0003b620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b620:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b630:·6d37·3333·3122·2074·6162·696e·6465·783d··m7331"·tabindex= | 0003b630:·6d37·3333·3122·2074·6162·696e·6465·783d··m7331"·tabindex= | ||
| 0003b640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b640:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b650:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b660:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b670:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b680:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b690:·6564·6961·7469·6f6e·204 | 0003b690:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b6a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b6b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b6c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b6d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b6e0:·3733·3331·223e·3c74·6162·6c65·2063·6c61··7331"><table·cla | |||
| 0003b6f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b700:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b710:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b720:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b730:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b740:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003b6a0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b6b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b6c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b6d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b6e0:·6522·2069·643d·2269·646d·3733·3331·223e··e"·id="idm7331"> | |||
| 0003b6f0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b700:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b710:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b720:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b730:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b740:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b750:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b760:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b770:·6172·6765·743d·2223·6964·6d37·3333·3222··arget="#idm7332" | |||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b7e0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b7f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b800:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b810:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b820:·2220·6964·3d22·6964·6d37·3333·3222·3e3c··"·id="idm7332">< | |||
| 0003b830:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b840:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b850:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b860:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b870:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b880:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b890:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b780:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b790:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b | 0003b8a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b8b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b8c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b | 0003b8d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b7c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b7d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b7e0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b7f0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b800:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b810:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b820:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b830:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b840:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b850:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b860:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b870:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b880:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b890:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b8a0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b8b0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b8c0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b8d0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b8e0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b8f0:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b900:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b910:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b920:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b930:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b940:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b950:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003b960:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b970:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003b980:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b990:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b9a0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b9b0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b9c0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b9d0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b9e0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b9f0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003ba00:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003ba10:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003ba20:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003ba30:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003ba40:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003ba50:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003ba60:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ba70:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ba80:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ba90:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003baa0:·6574·3d22·2369·646d·3733·3332·2220·7461··et="#idm7332"·ta | |||
| 0003bab0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003bac0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003bad0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003bae0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003baf0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003bb00:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003bb10:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003bb20:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bb30:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bb40:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003bb50:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003bb60:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bb70:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bb80:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bb90:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bba0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bbb0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bbc0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003bbd0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b8e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b8f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b900:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b910:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| Max diff block lines reached; 10791736/10828886 bytes (99.66%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 60 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 175 | ··package_facts: |
| Offset 165, 60 lines modified | Offset 211, 14 lines modified | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | package·install·aide | 216 | package·install·aide |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·rpm·--quiet·-q·kernel;·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····dnf·install·-y·"aide" | ||
| 184 | fi | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | dnf·install·aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | include·install_aide | ||
| 200 | class·install_aide·{ | ||
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | package·--add=aide | ||
| 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 217 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 218 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 219 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 220 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 14 lines modified | Offset 291, 58 lines modified | ||
| 291 | ············_\x8i_\x8s_\x8m······1446 | 291 | ············_\x8i_\x8s_\x8m······1446 |
| 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1125978/1131517 bytes (99.51%) of diff not shown. | |||
| Offset 15207, 279 lines modified | Offset 15207, 279 lines modified | ||
| 0003b660:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b660:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b670:·3733·3331·2220·7461·6269·6e64·6578·3d22··7331"·tabindex=" | 0003b670:·3733·3331·2220·7461·6269·6e64·6578·3d22··7331"·tabindex=" | ||
| 0003b680:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b680:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b690:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b690:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b6a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b6a0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b6b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b6b0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b6c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b6c0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b6d0:·6469·6174·696f·6e20·4 | 0003b6d0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b6e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b6f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b700:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b710:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b720:·3333·3122·3e3c·7461·626c·6520·636c·6173··331"><table·clas | |||
| 0003b730:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b740:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b750:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b760:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b770:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b780:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b | 0003b6e0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b6f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b700:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b710:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b720:·2220·6964·3d22·6964·6d37·3333·3122·3e3c··"·id="idm7331">< | |||
| 0003b730:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b740:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b750:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b760:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b770:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b780:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b790:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b7a0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b7b0:·7267·6574·3d22·2369·646d·3733·3332·2220··rget="#idm7332"· | |||
| 0003b7c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b7d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b7e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b7f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b800:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b810:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b820:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b830:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b840:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b850:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b860:·2069·643d·2269·646d·3733·3332·223e·3c74···id="idm7332"><t | |||
| 0003b870:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b880:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b890:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b8a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b8b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b8c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b8d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b7c0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b7d0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b | 0003b8e0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b8f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b900:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b910:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b800:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b810:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b820:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b830:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b840:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b850:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b860:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b870:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b880:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b890:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b8a0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b8b0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b8c0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b8d0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b8e0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b8f0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b900:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b910:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b920:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b930:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b940:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b950:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b960:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b970:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b980:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b990:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b9a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b9b0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b9c0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b9d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b9e0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b9f0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003ba00:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003ba10:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003ba20:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003ba30:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003ba40:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003ba50:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003ba60:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003ba70:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003ba80:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003ba90:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003baa0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bab0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bac0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bad0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bae0:·743d·2223·6964·6d37·3333·3222·2074·6162··t="#idm7332"·tab | |||
| 0003baf0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bb00:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bb10:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bb20:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bb30:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bb40:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bb50:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bb60:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bb70:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bb80:·6170·7365·2220·6964·3d22·6964·6d37·3333··apse"·id="idm733 | |||
| 0003bb90:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003bba0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bbb0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bbc0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bbd0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bbe0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bbf0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bc00:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003bc10:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b | 0003b920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b930:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b940:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b950:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| Max diff block lines reached; 10791736/10828886 bytes (99.66%) of diff not shown. | |||
| Offset 123, 14 lines modified | Offset 123, 60 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8c_\x8i_\x8s············6.1.1 | 128 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·rpm·--quiet·-q·kernel;·then | ||
| 152 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 153 | ····dnf·install·-y·"aide" | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | package·--add=aide | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | dnf·install·aide | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Gather·the·package·facts | 175 | -·name:·Gather·the·package·facts |
| 136 | ··package_facts: | 176 | ··package_facts: |
| Offset 166, 60 lines modified | Offset 212, 14 lines modified | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | package·install·aide | 217 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····dnf·install·-y·"aide" | ||
| 185 | fi | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | include·install_aide | ||
| 201 | class·install_aide·{ | ||
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 212 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 218 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 213 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 219 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 214 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 220 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 215 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 221 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 222 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 292, 14 lines modified | Offset 292, 58 lines modified | ||
| 292 | ············_\x8i_\x8s_\x8m······1446 | 292 | ············_\x8i_\x8s_\x8m······1446 |
| 293 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 293 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 294 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 294 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 295 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 295 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 296 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1125978/1131517 bytes (99.51%) of diff not shown. | |||
| Offset 15205, 278 lines modified | Offset 15205, 278 lines modified | ||
| 0003b640:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | 0003b640:·6574·3d22·2369·646d·3733·3331·2220·7461··et="#idm7331"·ta | ||
| 0003b650:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b650:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b660:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b660:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b670:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b670:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b680:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b680:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b690:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b690:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b6a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b6a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b6b0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b6c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b6d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b6e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b6f0:·6964·3d22·6964·6d37·3333·3122·3e3c·7461··id="idm7331"><ta | |||
| 0003b700:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b710:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b720:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b730:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b740:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b750:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b760:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b6b0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b6c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b6e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b6f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b700:·6d37·3333·3122·3e3c·7072·653e·3c63·6f64··m7331"><pre><cod | |||
| 0003b710:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b720:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b730:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b740:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b750:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b760:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b770:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b780:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b790:·646d·3733·3332·2220·7461·6269·6e64·6578··dm7332"·tabindex | |||
| 0003b7a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b7b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b7c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b7d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b7e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b7f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b800:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b810:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b820:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b830:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b840:·3733·3332·223e·3c74·6162·6c65·2063·6c61··7332"><table·cla | |||
| 0003b850:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b860:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b870:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b880:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b890:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b8a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b790:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003b8b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b8c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b8d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b8e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b7c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b7d0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b7e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b7f0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b800:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b810:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b820:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b830:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b840:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b850:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b860:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b870:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b880:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b890:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b8a0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b8b0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b8c0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b8d0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b8e0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b8f0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b900:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b910:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b920:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b930:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b940:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b950:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b960:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b970:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b980:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b990:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b9a0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b9b0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b9c0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b9d0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b9e0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b9f0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003ba00:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003ba10:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003ba20:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003ba30:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003ba40:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003ba50:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003ba60:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003ba70:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ba80:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ba90:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003baa0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bab0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bac0:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | |||
| 0003bad0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bae0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003baf0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bb00:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bb10:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bb20:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003bb30:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bb40:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bb50:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bb60:·3d22·6964·6d37·3333·3222·3e3c·7461·626c··="idm7332"><tabl | |||
| 0003bb70:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bb80:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bb90:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bba0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bbb0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bbc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bbd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bbe0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b | 0003b8f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b900:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b910:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b920:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| Max diff block lines reached; 10790220/10827232 bytes (99.66%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 60 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 175 | ··package_facts: |
| Offset 165, 60 lines modified | Offset 211, 14 lines modified | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | package·install·aide | 216 | package·install·aide |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 181 | if·rpm·--quiet·-q·kernel;·then | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 183 | ····dnf·install·-y·"aide" | ||
| 184 | fi | ||
| 185 | else | ||
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 187 | fi | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | dnf·install·aide | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | include·install_aide | ||
| 200 | class·install_aide·{ | ||
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 210 | package·--add=aide | ||
| 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 217 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 218 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 219 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 220 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 291, 14 lines modified | Offset 291, 58 lines modified | ||
| 291 | ············_\x8i_\x8s_\x8m······1446 | 291 | ············_\x8i_\x8s_\x8m······1446 |
| 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 292 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 293 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 294 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 295 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1125978/1131517 bytes (99.51%) of diff not shown. | |||
| Offset 15477, 250 lines modified | Offset 15477, 250 lines modified | ||
| 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003c740:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c750:·2223·6964·6d37·3935·3522·2074·6162·696e··"#idm7955"·tabin | 0003c750:·2223·6964·6d37·3935·3522·2074·6162·696e··"#idm7955"·tabin | ||
| 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003c760:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003c770:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003c780:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003c790:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003c7a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003c7b0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003c7c0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c7d0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c7e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c7f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c800:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003c810:·3535·223e·3c70·7265·3e3c·636f·6465·3e0a··55"><pre><code>. | |||
| 0003c820:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003c7c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c7d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c7e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c7f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c800:·2269·646d·3739·3535·223e·3c74·6162·6c65··"idm7955"><table | |||
| 0003c810:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c820:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c830:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c840:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c850:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c860:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c870:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c880:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c890:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c8a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c8b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c8c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c8d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003c8e0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003c8f0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003c900:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003c910:·2063·7279·7074·6f2d·706f·6c69·6369·6573···crypto-policies | |||
| 0003c920:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003c930:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003c | 0003c830:·6520·3d20·2263·7279·7074·6f2d·706f·6c69··e·=·"crypto-poli | ||
| 0003c840:·6369·6573·220a·7665·7273·696f·6e20·3d20··cies".version·=· | |||
| 0003c950:·6573·0a20·2020·2073·7461·7465·3a20·7072··es.····state:·pr | |||
| 0003c960:·6573·656e·740a·2020·7461·6773·3a0a·2020··esent.··tags:.·· | |||
| 0003c970:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003c980:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003c990:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003c9a0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003c9b0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003c9c0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003c9d0:·0a20·202d·2070·6163·6b61·6765·5f63·7279··.··-·package_cry | |||
| 0003c9e0:·7074·6f2d·706f·6c69·6369·6573·5f69·6e73··pto-policies_ins | |||
| 0003c9f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003ca00:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ca10:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ca20:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ca30:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ca40:·2d74·6172·6765·743d·2223·6964·6d37·3935··-target="#idm795 | |||
| 0003ca50:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0003ca60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ca70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ca80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ca90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003caa0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003cab0:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003cac0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003cad0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003cae0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003caf0:·6964·6d37·3935·3622·3e3c·7461·626c·6520··idm7956"><table· | |||
| 0003cb00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003cb10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003cb20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003cb30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003cb40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003cb50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003cb60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003cb70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003cb80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003cb90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003cba0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003cbb0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003cbc0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003cbd0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003cbe0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003cbf0:·3e0a·7061·636b·6167·6520·696e·7374·616c··>.package·instal | |||
| 0003cc00:·6c20·6372·7970·746f·2d70·6f6c·6963·6965··l·crypto-policie | |||
| 0003c | 0003c850:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003cc20:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003cc30:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003cc40:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003cc50:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003cc60:·6574·3d22·2369·646d·3739·3537·2220·7461··et="#idm7957"·ta | |||
| 0003cc70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003cc80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003cc90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003cca0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003ccb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003ccc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003ccd0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003cce0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ccf0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003cd00:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003cd10:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003cd20:·6d37·3935·3722·3e3c·7072·653e·3c63·6f64··m7957"><pre><cod | |||
| 0003cd30:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003cd40:·6e61·6d65·203d·2022·6372·7970·746f·2d70··name·=·"crypto-p | |||
| 0003cd50:·6f6c·6963·6965·7322·0a76·6572·7369·6f6e··olicies".version | |||
| 0003cd60:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003cd70:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003cd80:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003cd90:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003cda0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003cdb0:·2d74·6172·6765·743d·2223·6964·6d37·3935··-target="#idm795 | |||
| 0003cdc0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003cdd0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003cde0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003cdf0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ce00:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ce10:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ce20:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0003ce30:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ce40:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ce50:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ce60:·2220·6964·3d22·6964·6d37·3935·3822·3e3c··"·id="idm7958">< | |||
| 0003ce70:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ce80:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ce90:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003cea0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| Max diff block lines reached; 6700850/6733998 bytes (99.51%) of diff not shown. | |||
| Offset 145, 77 lines modified | Offset 145, 77 lines modified | ||
| 145 | $·sudo·dnf·install·crypto-policies | 145 | $·sudo·dnf·install·crypto-policies |
| 146 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 146 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 147 | Severity: ··medium | 147 | Severity: ··medium |
| 148 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 148 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 149 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 149 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 150 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 150 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 151 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | -·name:·Ensure·crypto-policies·is·installed | ||
| 158 | ··package: | ||
| 159 | ····name:·crypto-policies | ||
| 160 | ····state:·present | ||
| 161 | ··tags: | ||
| 162 | ··-·enable_strategy | ||
| 163 | ··-·low_complexity | ||
| 164 | ··-·low_disruption | ||
| 165 | ··-·medium_severity | ||
| 166 | ··-·no_reboot_needed | ||
| 167 | ··-·package_crypto-policies_installed | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·install·crypto-policies | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 175 | [[packages]] | 153 | [[packages]] |
| 176 | name·=·"crypto-policies" | 154 | name·=·"crypto-policies" |
| 177 | version·=·"*" | 155 | version·=·"*" |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | include·install_crypto-policies | ||
| 162 | class·install_crypto-policies·{ | ||
| 163 | ··package·{·'crypto-policies': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 172 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 184 | ····dnf·install·-y·"crypto-policies" | 173 | ····dnf·install·-y·"crypto-policies" |
| 185 | fi | 174 | fi |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·--add=crypto-policies | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | dnf·install·crypto-policies | 186 | dnf·install·crypto-policies |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_crypto-policies | ||
| 198 | class·install_crypto-policies·{ | ||
| 199 | ··package·{·'crypto-policies': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | 192 | -·name:·Ensure·crypto-policies·is·installed | |
| 193 | ··package: | ||
| 194 | ····name:·crypto-policies | ||
| 195 | ····state:·present | ||
| 196 | ··tags: | ||
| 197 | ··-·enable_strategy | ||
| 198 | ··-·low_complexity | ||
| 199 | ··-·low_disruption | ||
| 200 | ··-·medium_severity | ||
| 201 | ··-·no_reboot_needed | ||
| 202 | ··-·package_crypto-policies_installed | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | package· | 208 | package·install·crypto-policies |
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 210 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 211 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 211 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 212 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 212 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 213 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 213 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 214 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 214 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 215 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 215 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 226, 14 lines modified | Offset 226, 58 lines modified | ||
| 226 | ············_\x8i_\x8s_\x8m······1446 | 226 | ············_\x8i_\x8s_\x8m······1446 |
| 227 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 227 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 228 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 228 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 229 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 229 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 230 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 230 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 231 | ············_\x8c_\x8i_\x8s······1.6.1 | 231 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 232 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 232 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 234 | var_system_crypto_policy='FIPS:OSPP' | ||
| 235 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 236 | rc=$? | ||
| 237 | if·test·"$rc"·=·127;·then | ||
| 238 | » echo·"$stderr_of_call"·>&2 | ||
| 239 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 240 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 241 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| Max diff block lines reached; 917083/925455 bytes (99.10%) of diff not shown. | |||
| Offset 15295, 408 lines modified | Offset 15295, 408 lines modified | ||
| 0003bbe0:·6765·743d·2223·6964·6d36·3939·3322·2074··get="#idm6993"·t | 0003bbe0:·6765·743d·2223·6964·6d36·3939·3322·2074··get="#idm6993"·t | ||
| 0003bbf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bbf0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bc00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bc00:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bc10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bc10:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bc20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bc20:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bc30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bc30:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bc40:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bc50:·20 | 0003bc50:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003bc60:· | 0003bc60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bc70:· | 0003bc70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bc80:· | 0003bc80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bc90:· | 0003bc90:·3d22·6964·6d36·3939·3322·3e3c·7072·653e··="idm6993"><pre> | ||
| 0003bca0:· | 0003bca0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003bcb0:·6 | 0003bcb0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003bcc0:· | 0003bcc0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003bcd0:·6 | 0003bcd0:·6e20·706c·6174·666f·726d·730a·6966·2021··n·platforms.if·! | ||
| 0003bce0:· | 0003bce0:·2028·207b·2072·706d·202d·2d71·7569·6574···(·{·rpm·--quiet | ||
| 0003bcf0:· | 0003bcf0:·202d·7120·6b65·726e·656c·203b·7d20·2661···-q·kernel·;}·&a | ||
| 0003bd00:·3 | 0003bd00:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003bd10:· | 0003bd10:·2d71·7569·6574·202d·7120·7270·6d2d·6f73··-quiet·-q·rpm-os | ||
| 0003bd20:· | 0003bd20:·7472·6565·203b·7d20·2661·6d70·3b26·616d··tree·;}·&&am | ||
| 0003bd30:· | 0003bd30:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003bd40:· | 0003bd40:·202d·7120·626f·6f74·6320·3b7d·2026·616d···-q·bootc·;}·&am | ||
| 0003bd50:· | 0003bd50:·703b·2661·6d70·3b20·7b20·2120·7270·6d20··p;&·{·!·rpm· | ||
| 0003bd60:· | 0003bd60:·2d2d·7175·6965·7420·2d71·206f·7065·6e73··--quiet·-q·opens | ||
| 0003bd70:· | 0003bd70:·6869·6674·2d6b·7562·656c·6574·203b·7d20··hift-kubelet·;}· | ||
| 0003bd80:·2 | 0003bd80:·293b·2074·6865·6e0a·0a23·2046·696e·6420··);·then..#·Find· | ||
| 0003bd90:· | 0003bd90:·7768·6963·6820·6669·6c65·7320·6861·7665··which·files·have | ||
| 0003bda0:· | 0003bda0:·2069·6e63·6f72·7265·6374·2068·6173·6820···incorrect·hash· | ||
| 0003bdb0:· | 0003bdb0:·286e·6f74·2069·6e20·2f65·7463·2c20·6265··(not·in·/etc,·be | ||
| 0003bdc0:·6 | 0003bdc0:·6361·7573·6520·6f66·2074·6865·2073·7973··cause·of·the·sys | ||
| 0003bdd0:· | 0003bdd0:·7465·6d20·7265·6c61·7465·6420·636f·6e66··tem·related·conf | ||
| 0003bde0:· | 0003bde0:·6967·2066·696c·6573·2920·616e·6420·7468··ig·files)·and·th | ||
| 0003bdf0:· | 0003bdf0:·656e·2067·6574·2066·696c·6573·206e·616d··en·get·files·nam | ||
| 0003be00:· | 0003be00:·6573·0a66·696c·6573·5f77·6974·685f·696e··es.files_with_in | ||
| 0003be10:· | 0003be10:·636f·7272·6563·745f·6861·7368·3d22·2428··correct_hash="$( | ||
| 0003be20:· | 0003be20:·7270·6d20·2d56·6120·2d2d·6e6f·636f·6e66··rpm·-Va·--noconf | ||
| 0003be30:· | 0003be30:·6967·207c·2067·7265·7020·2d45·2027·5e2e··ig·|·grep·-E·'^. | ||
| 0003be40:·2 | 0003be40:·2e35·2720·7c20·6177·6b20·277b·7072·696e··.5'·|·awk·'{prin | ||
| 0003be50:· | 0003be50:·7420·244e·467d·2720·2922·0a0a·6966·205b··t·$NF}'·)"..if·[ | ||
| 0003be60:·2 | 0003be60:·202d·6e20·2224·6669·6c65·735f·7769·7468···-n·"$files_with | ||
| 0003be70:· | 0003be70:·5f69·6e63·6f72·7265·6374·5f68·6173·6822··_incorrect_hash" | ||
| 0003be80:·534 | 0003be80:·205d·3b20·7468·656e·0a20·2020·2023·2046···];·then.····#·F | ||
| 0003be90:· | 0003be90:·726f·6d20·6669·6c65·7320·6e61·6d65·7320··rom·files·names· | ||
| 0003bea0:· | 0003bea0:·6765·7420·7061·636b·6167·6520·6e61·6d65··get·package·name | ||
| 0003beb0:· | 0003beb0:·7320·616e·6420·6368·616e·6765·206e·6577··s·and·change·new | ||
| 0003bec0:· | 0003bec0:·6c69·6e65·2074·6f20·7370·6163·652c·2062··line·to·space,·b | ||
| 0003bed0:· | 0003bed0:·6563·6175·7365·2072·706d·2077·7269·7465··ecause·rpm·write | ||
| 0003bee0:· | 0003bee0:·7320·6561·6368·2070·6163·6b61·6765·2074··s·each·package·t | ||
| 0003bef0:· | 0003bef0:·6f20·6e65·7720·6c69·6e65·0a20·2020·2070··o·new·line.····p | ||
| 0003bf00:· | 0003bf00:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003bf10:· | 0003bf10:·7461·6c6c·3d22·2428·7270·6d20·2d71·6620··tall="$(rpm·-qf· | ||
| 0003bf20:· | 0003bf20:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003bf30:·2 | 0003bf30:·7272·6563·745f·6861·7368·207c·2074·7220··rrect_hash·|·tr· | ||
| 0003bf40:· | 0003bf40:·275c·6e27·2027·2027·2922·0a0a·2020·2020··'\n'·'·')"..···· | ||
| 0003bf50:· | 0003bf50:·0a20·2020·2064·6e66·2072·6569·6e73·7461··.····dnf·reinsta | ||
| 0003bf60:·6 | 0003bf60:·6c6c·202d·7920·2470·6163·6b61·6765·735f··ll·-y·$packages_ | ||
| 0003bf70:· | 0003bf70:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003bf80:· | 0003bf80:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003bf90:·6 | 0003bf90:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003bfa0:· | 0003bfa0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003bfb0:·6 | 0003bfb0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003bfc0:· | 0003bfc0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003bfd0:· | 0003bfd0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003bfe0:· | 0003bfe0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003bff0:·2 | 0003bff0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003c000:· | 0003c000:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003c010:· | 0003c010:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003c020:· | 0003c020:·7267·6574·3d22·2369·646d·3639·3934·2220··rget="#idm6994"· | ||
| 0003c030:· | 0003c030:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c040:·6 | 0003c040:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c050:·6 | 0003c050:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c060:·20 | 0003c060:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c070:· | 0003c070:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c080:· | 0003c080:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c090:·6 | 0003c090:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003c0a0:· | 0003c0a0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003c0b0:· | 0003c0b0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003c0c0:· | 0003c0c0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003c0d0:· | 0003c0d0:·2220·6964·3d22·6964·6d36·3939·3422·3e3c··"·id="idm6994">< | ||
| 0003c0e0:·7 | 0003c0e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003c0f0:· | 0003c0f0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003c100:·20 | 0003c100:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003c110:· | 0003c110:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003c120:·3 | 0003c120:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003c130:· | 0003c130:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003c140:· | 0003c140:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003c150:· | 0003c150:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003c160:· | 0003c160:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003c170:· | 0003c170:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c180:· | 0003c180:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003c190:· | 0003c190:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003c1a0:· | 0003c1a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003c1b0:· | 0003c1b0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003c1c0:· | 0003c1c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003c1d0:· | 0003c1d0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003c1e0:· | 0003c1e0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003c1f0:·706 | 0003c1f0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003c200:· | 0003c200:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003c210:· | 0003c210:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003c220:· | 0003c220:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003c230:· | 0003c230:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c240:· | 0003c240:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c250:· | 0003c250:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c260:· | 0003c260:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c270:· | 0003c270:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c280:· | 0003c280:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c290:· | 0003c290:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c2a0:· | 0003c2a0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c2b0:· | 0003c2b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c2c0:· | 0003c2c0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c2d0:· | 0003c2d0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c2e0:·2 | 0003c2e0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c2f0:·2 | 0003c2f0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c300:· | 0003c300:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c310:· | 0003c310:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c320:· | 0003c320:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c330:· | 0003c330:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c340:· | 0003c340:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c350:· | 0003c350:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c360:· | 0003c360:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c370:· | 0003c370:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c380:· | 0003c380:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c390:· | 0003c390:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c3a0:· | 0003c3a0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003c3b0:· | 0003c3b0:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| Max diff block lines reached; 16441584/16496536 bytes (99.67%) of diff not shown. | |||
| Offset 15212, 278 lines modified | Offset 15212, 278 lines modified | ||
| 0003b6b0:·7461·7267·6574·3d22·2369·646d·3733·3331··target="#idm7331 | 0003b6b0:·7461·7267·6574·3d22·2369·646d·3733·3331··target="#idm7331 | ||
| 0003b6c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b6c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b6d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b6d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b6e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b6e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b6f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b6f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b700:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b700:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b710:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b710:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b720:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b730:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b740:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b750:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b7 | 0003b720:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b730:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b740:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b750:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b760:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b770:·3d22·6964·6d37·3333·3122·3e3c·7072·653e··="idm7331"><pre> | |||
| 0003b780:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b790:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b7a0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b7b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b7 | 0003b7c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b780:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b790:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b7a0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b7b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b7c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b7d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b7 | 0003b7d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b7e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b7f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b800:·3d22·2369·646d·3733·3332·2220·7461·6269··="#idm7332"·tabi | |||
| 0003b810:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b820:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b830:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b840:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b850:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b860:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b870:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b880:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b890:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b8a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b8b0:·2269·646d·3733·3332·223e·3c74·6162·6c65··"idm7332"><table | |||
| 0003b8c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b8d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b8e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b8f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b900:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003b910:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b920:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b930:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b940:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b950:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b960:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003b970:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b810:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b820:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b830:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b840:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b850:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b860:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b870:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b880:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b890:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b8a0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b8b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b8c0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b8d0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b8e0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b8f0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b900:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b910:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b920:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b930:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b940:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b950:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b960:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b970:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b980:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b990:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b9a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b9b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b9c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b9d0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003b9e0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b9f0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003ba00:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003ba10:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003ba20:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003ba30:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003ba40:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003ba50:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003ba60:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003ba70:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003ba80:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ba90:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003baa0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bab0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bac0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bad0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003bae0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003baf0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bb00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bb10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bb20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bb30:·6964·6d37·3333·3222·2074·6162·696e·6465··idm7332"·tabinde | |||
| 0003bb40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bb50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bb60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bb70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bb80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bb90:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003bba0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bbb0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bbc0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bbd0:·2220·6964·3d22·6964·6d37·3333·3222·3e3c··"·id="idm7332">< | |||
| 0003bbe0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bbf0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bc00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bc10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bc20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b980:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b990:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b9a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b9b0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b9c0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b9d0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| Max diff block lines reached; 33338171/33375183 bytes (99.89%) of diff not shown. | |||
| Offset 15207, 279 lines modified | Offset 15207, 279 lines modified | ||
| 0003b660:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | 0003b660:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0003b670:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | 0003b670:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | ||
| 0003b680:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b680:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b690:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b690:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b6d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b6e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b6f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b700:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b710:·6170·7365·2220·6964·3d22·6964·6d37·3333··apse"·id="idm733 | |||
| 0003b720:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003b730:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b740:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b750:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b760:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b770:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b780:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b | 0003b6d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b6e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b6f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b700:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b710:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b720:·6964·3d22·6964·6d37·3333·3122·3e3c·7072··id="idm7331"><pr | |||
| 0003b730:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b740:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b750:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b760:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b770:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b780:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b790:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b7a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b7b0:·6574·3d22·2369·646d·3733·3332·2220·7461··et="#idm7332"·ta | |||
| 0003b7c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b7d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b7e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b800:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b810:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b820:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b830:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b840:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b850:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b860:·643d·2269·646d·3733·3332·223e·3c74·6162··d="idm7332"><tab | |||
| 0003b870:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b880:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b890:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8a0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b8b0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b8c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b8d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b8e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b8f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b900:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b910:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b920:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b930:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b940:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b950:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b960:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b970:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b7c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b7d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b7e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b7f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b800:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b810:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b820:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b830:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b840:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b850:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b860:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b870:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b880:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b890:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b8a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b8b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b8c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b8d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b8e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b8f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b900:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b910:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b920:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b930:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b940:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b950:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b960:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b970:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b980:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b990:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b9a0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b9b0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b9c0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b9d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b9e0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b9f0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003ba00:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003ba10:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003ba20:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003ba30:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003ba40:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003ba50:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003ba60:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003ba70:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003ba80:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003ba90:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003baa0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bab0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bac0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bad0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bae0:·2223·6964·6d37·3333·3222·2074·6162·696e··"#idm7332"·tabin | |||
| 0003baf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bb00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bb10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bb20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bb30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bb40:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003bb50:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003bb60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bb70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bb80:·7365·2220·6964·3d22·6964·6d37·3333·3222··se"·id="idm7332" | |||
| 0003bb90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bba0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bbb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bbc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| Max diff block lines reached; 33204258/33241408 bytes (99.89%) of diff not shown. | |||
| Offset 15181, 283 lines modified | Offset 15181, 283 lines modified | ||
| 0003b4c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b4c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4d0:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | 0003b4d0:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | ||
| 0003b4e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b500:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b500:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b510:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b510:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b520:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b520:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b530:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b530:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b540:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b550:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b560:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b570:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b580:·3d22·6964·6d38·3438·3022·3e3c·7461·626c··="idm8480"><tabl | |||
| 0003b590:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b5a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b5b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b5c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b5d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b5e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b5f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b | 0003b540:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b550:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b560:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b570:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b580:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b590:·3438·3022·3e3c·7072·653e·3c63·6f64·653e··480"><pre><code> | |||
| 0003b5a0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b5b0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b5c0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b5d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b5e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b5f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b600:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b610:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b620:·3834·3831·2220·7461·6269·6e64·6578·3d22··8481"·tabindex=" | |||
| 0003b630:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b640:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b650:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b660:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b670:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b680:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b690:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b6a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b6b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b6c0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b6d0:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003b6e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b6f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b700:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b710:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b720:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b730:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b620:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003b740:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b750:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b64 | 0003b760:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b770:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b780:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b790:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b7a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b7b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b7c0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b660:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b670:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b680:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b690:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b6a0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b6b0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b6c0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b6d0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b6e0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b6f0:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b700:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b710:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b720:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b730:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b740:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b750:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b760:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b770:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b780:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b790:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b7a0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b7b0:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b7c0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b7d0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b7e0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b7f0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b800:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b810:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b820:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b830:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b840:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b850:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b860:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b870:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b880:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b890:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b8a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b8b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b8c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b8d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b8e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b8f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b900:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b910:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b920:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b930:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b940:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b950:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b960:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b970:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b980:·743d·2223·6964·6d38·3438·3122·2074·6162··t="#idm8481"·tab | |||
| 0003b990:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b9a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b9b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b9c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b9d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b9e0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b9f0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003ba00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ba10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ba20:·6170·7365·2220·6964·3d22·6964·6d38·3438··apse"·id="idm848 | |||
| 0003ba30:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003ba40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ba50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ba60:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| Max diff block lines reached; 22761117/22798819 bytes (99.83%) of diff not shown. | |||
| Offset 15187, 282 lines modified | Offset 15187, 282 lines modified | ||
| 0003b520:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | 0003b520:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | ||
| 0003b530:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b530:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b540:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b540:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b550:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b550:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b560:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b560:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b570:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b570:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b580:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b580:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b590:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b5a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b5c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5d0:·2069·643d·2269·646d·3834·3830·223e·3c74···id="idm8480"><t | |||
| 0003b5e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b5f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b600:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b610:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b620:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b630:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b640:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b590:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b5a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b5b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5e0:·646d·3834·3830·223e·3c70·7265·3e3c·636f··dm8480"><pre><co | |||
| 0003b5f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b600:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b610:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b620:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b630:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b640:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b650:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b660:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b670:·6964·6d38·3438·3122·2074·6162·696e·6465··idm8481"·tabinde | |||
| 0003b680:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b690:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b6a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6d0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b6e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b6f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b700:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b710:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b720:·6d38·3438·3122·3e3c·7461·626c·6520·636c··m8481"><table·cl | |||
| 0003b730:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b740:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b750:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b760:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b770:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b780:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b670:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b790:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b7a0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003b7b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b7c0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7d0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b7e0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b7f0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b800:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b810:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b820:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b830:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b840:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b850:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b860:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b870:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b6a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b6b0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b6c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b6d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b6e0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b6f0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b700:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b710:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b720:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b730:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b740:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b750:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b760:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b770:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b780:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b790:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b7a0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b7b0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b7c0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b7d0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b7e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b7f0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b800:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b810:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b820:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b830:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b840:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b850:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b860:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b870:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b880:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b890:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b8a0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b8b0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b8c0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b8d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b8e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b8f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b900:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b910:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b920:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b930:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b940:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b950:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b960:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b970:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003b880:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | ||
| 0003b | 0003b890:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003b8a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b8b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b8c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b8d0:·6574·3d22·2369·646d·3834·3832·2220·7461··et="#idm8482"·ta | ||
| 0003b | 0003b8e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b8f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b900:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b910:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b920:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b930:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b | 0003b940:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b | 0003b950:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| Max diff block lines reached; 23191146/23228710 bytes (99.84%) of diff not shown. | |||
| Offset 15177, 282 lines modified | Offset 15177, 282 lines modified | ||
| 0003b480:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b480:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b490:·6964·6d38·3438·3022·2074·6162·696e·6465··idm8480"·tabinde | 0003b490:·6964·6d38·3438·3022·2074·6162·696e·6465··idm8480"·tabinde | ||
| 0003b4a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b4a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b4b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b4b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b4c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b4c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b4d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b4d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b4e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b4e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b4f0:·656d·6564·6961·7469·6f6e·204 | 0003b4f0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b500:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b510:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b520:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b530:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b540:·646d·3834·3830·223e·3c74·6162·6c65·2063··dm8480"><table·c | |||
| 0003b550:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b560:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b570:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b580:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b590:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b5a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b5 | 0003b500:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b510:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b520:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b530:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b540:·7073·6522·2069·643d·2269·646d·3834·3830··pse"·id="idm8480 | |||
| 0003b550:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b560:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b570:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b580:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b590:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b5a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b5b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b5c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5d0:·2d74·6172·6765·743d·2223·6964·6d38·3438··-target="#idm848 | |||
| 0003b5e0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b5f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b600:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b610:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b620:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b630:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b640:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b650:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b660:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b670:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b680:·7365·2220·6964·3d22·6964·6d38·3438·3122··se"·id="idm8481" | |||
| 0003b690:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b6a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b6b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b6c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b6d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b6e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b6f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b5e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b700:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b710:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b720:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b730:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b740:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b750:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b760:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b770:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b780:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b620:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b630:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b640:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b650:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b660:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b670:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b680:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b690:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b6a0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b6b0:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003b6c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b6e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b6f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b700:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b710:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b720:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b730:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b740:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b750:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b760:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b770:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b780:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b790:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b7a0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b7b0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b7c0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b7d0:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b7e0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b7f0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b800:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b810:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b820:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b830:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b840:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b850:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b860:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b870:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b880:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b890:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b8a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b8b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b8c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b8d0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b8e0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b8f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b900:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b910:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b920:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b940:·2369·646d·3834·3831·2220·7461·6269·6e64··#idm8481"·tabind | |||
| 0003b950:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b960:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b970:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b980:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b990:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b9a0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b9b0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b9c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b9d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b9e0:·6522·2069·643d·2269·646d·3834·3831·223e··e"·id="idm8481"> | |||
| 0003b9f0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ba00:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ba10:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ba20:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ba30:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 9916197/9953761 bytes (99.62%) of diff not shown. | |||
| Offset 135, 14 lines modified | Offset 135, 60 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·rpm·--quiet·-q·kernel;·then | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 165 | ····dnf·install·-y·"aide" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·--add=aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | dnf·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Gather·the·package·facts | 187 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 188 | ··package_facts: |
| Offset 180, 60 lines modified | Offset 226, 14 lines modified | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | package·install·aide | 231 | package·install·aide |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | [[packages]] | ||
| 188 | name·=·"aide" | ||
| 189 | version·=·"*" | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 196 | if·rpm·--quiet·-q·kernel;·then | ||
| 197 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 198 | ····dnf·install·-y·"aide" | ||
| 199 | fi | ||
| 200 | else | ||
| 201 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 202 | fi | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | dnf·install·aide | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | include·install_aide | ||
| 215 | class·install_aide·{ | ||
| 216 | ··package·{·'aide': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 225 | package·--add=aide | ||
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 232 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 227 | Run·the·following·command·to·generate·a·new·database: | 233 | Run·the·following·command·to·generate·a·new·database: |
| 228 | $·sudo·/usr/sbin/aide·--init | 234 | $·sudo·/usr/sbin/aide·--init |
| 229 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 235 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 230 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 236 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 231 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 237 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 232 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 238 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 259, 14 lines modified | Offset 259, 28 lines modified | ||
| 259 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 259 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 260 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 260 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 261 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 261 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 262 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 262 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 263 | ············_\x8c_\x8i_\x8s············6.1.1 | 263 | ············_\x8c_\x8i_\x8s············6.1.1 |
| Max diff block lines reached; 1113864/1118747 bytes (99.56%) of diff not shown. | |||
| Offset 14856, 294 lines modified | Offset 14856, 294 lines modified | ||
| 0003a070:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003a070:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003a080:·6964·6d31·3236·3731·2220·7461·6269·6e64··idm12671"·tabind | 0003a080:·6964·6d31·3236·3731·2220·7461·6269·6e64··idm12671"·tabind | ||
| 0003a090:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003a090:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003a0a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003a0a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003a0b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003a0b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003a0c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003a0c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003a0d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003a0d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003a0e0:·5265·6d65·6469·6174·696f·6e20·4 | 0003a0e0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003a0f0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003a100:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a110:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a120:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a130:·6170·7365·2220·6964·3d22·6964·6d31·3236··apse"·id="idm126 | |||
| 0003a140:·3731·223e·3c70·7265·3e3c·636f·6465·3e0a··71"><pre><code>. | |||
| 0003a150:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003a0f0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003a100:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a110:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a120:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a130:·6964·6d31·3236·3731·223e·3c74·6162·6c65··idm12671"><table | |||
| 0003a140:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003a150:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003a160:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003a170:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003a180:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a190:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a1a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a1b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a1c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a1d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a1e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a200:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003a210:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003a220:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003a230:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003a240:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003a250:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003a260:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003a270:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003a280:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003a290:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003a2a0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003a2b0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003a2c0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003a2d0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003a2e0:·0a20·202d·2070·6163·6b61·6765·5f64·6e66··.··-·package_dnf | |||
| 0003a2f0:·2d61·7574·6f6d·6174·6963·5f69·6e73·7461··-automatic_insta | |||
| 0003a300:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003a | 0003a160:·6520·3d20·2264·6e66·2d61·7574·6f6d·6174··e·=·"dnf-automat | ||
| 0003a170:·6963·220a·7665·7273·696f·6e20·3d20·222a··ic".version·=·"* | |||
| 0003a320:·6963·2069·7320·696e·7374·616c·6c65·640a··ic·is·installed. | |||
| 0003a330:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003a340:·616d·653a·2064·6e66·2d61·7574·6f6d·6174··ame:·dnf-automat | |||
| 0003a350:·6963·0a20·2020·2073·7461·7465·3a20·7072··ic.····state:·pr | |||
| 0003a360:·6573·656e·740a·2020·7768·656e·3a20·6e6f··esent.··when:·no | |||
| 0003a370:·7420·2820·226b·6572·6e65·6c22·2069·6e20··t·(·"kernel"·in· | |||
| 0003a380:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a390:·636b·6167·6573·2061·6e64·2022·7270·6d2d··ckages·and·"rpm- | |||
| 0003a3a0:·6f73·7472·6565·2220·696e·2061·6e73·6962··ostree"·in·ansib | |||
| 0003a3b0:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a3c0:·730a·2020·2020·616e·6420·2262·6f6f·7463··s.····and·"bootc | |||
| 0003a3d0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003a3e0:·7473·2e70·6163·6b61·6765·7320·616e·6420··ts.packages·and· | |||
| 0003a3f0:·6e6f·7420·226f·7065·6e73·6869·6674·2d6b··not·"openshift-k | |||
| 0003a400:·7562·656c·6574·2220·696e·2061·6e73·6962··ubelet"·in·ansib | |||
| 0003a410:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a420:·730a·2020·2020·290a·2020·7461·6773·3a0a··s.····).··tags:. | |||
| 0003a430:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a440:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a450:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a460:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a470:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a480:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a490:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a4a0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a4b0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003a4c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003a4d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003a4e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003a4f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003a500:·2d74·6172·6765·743d·2223·6964·6d31·3236··-target="#idm126 | |||
| 0003a510:·3732·2220·7461·6269·6e64·6578·3d22·3022··72"·tabindex="0" | |||
| 0003a520:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003a530:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003a540:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003a550:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003a560:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003a570:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003a580:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a590:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a5a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003a5b0:·2269·646d·3132·3637·3222·3e3c·7461·626c··"idm12672"><tabl | |||
| 0003a5c0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003a5d0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003a5e0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003a5f0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003a600:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a610:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003a620:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a630:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003a640:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a650:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a660:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a670:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003a680:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003a690:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003a6a0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003a6b0:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003a6c0:·616c·6c20·646e·662d·6175·746f·6d61·7469··all·dnf-automati | |||
| 0003a | 0003a180:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003a | 0003a190:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003a | 0003a1a0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003a | 0003a1b0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003a | 0003a1c0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003a | 0003a1d0:·6574·3d22·2369·646d·3132·3637·3222·2074··et="#idm12672"·t | ||
| 0003a | 0003a1e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003a | 0003a1f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003a | 0003a200:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003a | 0003a210:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003a | 0003a220:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003a | 0003a230:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003a790:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003a7a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003a7b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a7c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a7d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| Max diff block lines reached; 3374686/3413906 bytes (98.85%) of diff not shown. | |||
| Offset 101, 57 lines modified | Offset 101, 31 lines modified | ||
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 105 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | -·name:·Gather·the·package·facts | ||
| 114 | ··package_facts: | ||
| 115 | ····manager:·auto | ||
| 116 | ··tags: | ||
| 117 | ··-·enable_strategy | ||
| 118 | ··-·low_complexity | ||
| 119 | ··-·low_disruption | ||
| 120 | ··-·medium_severity | ||
| 121 | ··-·no_reboot_needed | ||
| 122 | ··-·package_dnf-automatic_installed | ||
| 109 | [[packages]] | ||
| 123 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 124 | ··package: | ||
| 125 | 110 | name·=·"dnf-automatic" | |
| 111 | version·=·"*" | ||
| 126 | ····state:·present | ||
| 127 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 128 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 129 | ansible_facts.packages | ||
| 130 | ····) | ||
| 131 | ··tags: | ||
| 132 | ··-·enable_strategy | ||
| 133 | ··-·low_complexity | ||
| 134 | ··-·low_disruption | ||
| 135 | ··-·medium_severity | ||
| 136 | ··-·no_reboot_needed | ||
| 137 | ··-·package_dnf-automatic_installed | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | include·install_dnf-automatic | ||
| 118 | class·install_dnf-automatic·{ | ||
| 143 | package· | 119 | ··package·{·'dnf-automatic': |
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"dnf-automatic" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 128 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 129 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 160, 40 lines modified | Offset 134, 66 lines modified | ||
| 160 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 161 | ····dnf·install·-y·"dnf-automatic" | 135 | ····dnf·install·-y·"dnf-automatic" |
| 162 | fi | 136 | fi |
| 163 | else | 137 | else |
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 165 | fi | 139 | fi |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=dnf-automatic | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | dnf·install·dnf-automatic | 151 | dnf·install·dnf-automatic |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | 157 | -·name:·Gather·the·package·facts | |
| 158 | ··package_facts: | ||
| 159 | ····manager:·auto | ||
| 160 | ··tags: | ||
| 161 | ··-·enable_strategy | ||
| 162 | ··-·low_complexity | ||
| 163 | ··-·low_disruption | ||
| 164 | ··-·medium_severity | ||
| 165 | ··-·no_reboot_needed | ||
| 166 | ··-·package_dnf-automatic_installed | ||
| 178 | class·install_dnf-automatic·{ | ||
| 179 | ··package·{·'dnf-automatic': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | 167 | -·name:·Ensure·dnf-automatic·is·installed | |
| 168 | ··package: | ||
| 169 | ····name:·dnf-automatic | ||
| 170 | ····state:·present | ||
| 171 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 172 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 173 | ansible_facts.packages | ||
| 174 | ····) | ||
| 175 | ··tags: | ||
| 176 | ··-·enable_strategy | ||
| 177 | ··-·low_complexity | ||
| 178 | ··-·low_disruption | ||
| 179 | ··-·medium_severity | ||
| 180 | ··-·no_reboot_needed | ||
| 181 | ··-·package_dnf-automatic_installed | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 246052/250673 bytes (98.16%) of diff not shown. | |||
| Offset 15233, 251 lines modified | Offset 15233, 251 lines modified | ||
| 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 0003b800:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 0003b810:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b810:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b820:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b830:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b840:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b850:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b860:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b870:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b880:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b890:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8b0:·6522·2069·643d·2269·646d·3932·3530·223e··e"·id="idm9250"> | |||
| 0003b8c0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b8d0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003b8e0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003b8f0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b900:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b910:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b920:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b870:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b880:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b890:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8b0:·6170·7365·2220·6964·3d22·6964·6d39·3235··apse"·id="idm925 | |||
| 0003b8c0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b8d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b900:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b910:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b920:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b930:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b940:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b950:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b960:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b970:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b980:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b990:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b9a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b9b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b9c0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | |||
| 0003b9 | 0003b930:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | ||
| 0003b9e0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| 0003b9f0:·6f74·6520·746f·2076·6172·6961·626c·650a··ote·to·variable. | |||
| 0003b | 0003b940:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | ||
| 0003b950:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003b960:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003b970:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003b980:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003b990:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b9a0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003b9b0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003b9c0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003b9d0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003b9e0:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003b9f0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003ba00:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003ba10:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003ba20:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003ba30:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003ba40:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003ba50:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003ba60:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003ba70:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003ba80:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003ba90:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003baa0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bab0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bac0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bad0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003bae0:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003baf0:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003bb00:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003bb10:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003bb20:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003bb30:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003bb40:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003bb50:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003bb60:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003bb70:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003bb80:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003bb90:·7220·636f·6465·0a66·690a·3c2f·636f·6465··r·code.fi.</code | |||
| 0003bba0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bbb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bbc0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bbd0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bbe0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bbf0:·3932·3532·2220·7461·6269·6e64·6578·3d22··9252"·tabindex=" | |||
| 0003bc00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bc10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bc20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bc30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bc40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bc50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003bc60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003bc70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bc90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bca0:·646d·3932·3532·223e·3c74·6162·6c65·2063··dm9252"><table·c | |||
| 0003bcb0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcc0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bcd0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bce0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bcf0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd00:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd10:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd20:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd40:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd50:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003bd60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bd70:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003bd80:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003bd90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bda0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003bdb0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003bdc0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003bdd0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003bde0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003bdf0:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003be00:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003be10:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003be20:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003be30:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003be40:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003be50:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003be60:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| Max diff block lines reached; 13135190/13168476 bytes (99.75%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 58 lines modified | ||
| 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 124 | ············_\x8c_\x8i_\x8s······1.6.1 | 124 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | var_system_crypto_policy='DEFAULT' | ||
| 129 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 130 | rc=$? | ||
| 131 | if·test·"$rc"·=·127;·then | ||
| 132 | » echo·"$stderr_of_call"·>&2 | ||
| 133 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 134 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 135 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 136 | » false··#·end·with·an·error·code | ||
| 137 | elif·test·"$rc"·!=·0;·then | ||
| 138 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 139 | » false··#·end·with·an·error·code | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 146 | --- | ||
| 147 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 148 | kind:·MachineConfig | ||
| 149 | spec: | ||
| 150 | ··config: | ||
| 151 | ····ignition: | ||
| 152 | ······version:·3.1.0 | ||
| 153 | ····systemd: | ||
| 154 | ······units: | ||
| 155 | ········-·name:·configure-crypto-policy.service | ||
| 156 | ··········enabled:·true | ||
| 157 | ··········contents:·| | ||
| 158 | ············[Unit] | ||
| 159 | ············Before=kubelet.service | ||
| 160 | ············[Service] | ||
| 161 | ············Type=oneshot | ||
| 162 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 163 | ············RemainAfterExit=yes | ||
| 164 | ············[Install] | ||
| 165 | ············WantedBy=multi-user.target | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 132 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 171 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 133 | ··set_fact: | 172 | ··set_fact: |
| Offset 178, 58 lines modified | Offset 222, 14 lines modified | ||
| 178 | ··-·PCI-DSSv4-2.2.7 | 222 | ··-·PCI-DSSv4-2.2.7 |
| 179 | ··-·configure_crypto_policy | 223 | ··-·configure_crypto_policy |
| 180 | ··-·high_severity | 224 | ··-·high_severity |
| 181 | ··-·low_complexity | 225 | ··-·low_complexity |
| 182 | ··-·low_disruption | 226 | ··-·low_disruption |
| 183 | ··-·no_reboot_needed | 227 | ··-·no_reboot_needed |
| 184 | ··-·restrict_strategy | 228 | ··-·restrict_strategy |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | --- | ||
| 191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 192 | kind:·MachineConfig | ||
| 193 | spec: | ||
| 194 | ··config: | ||
| 195 | ····ignition: | ||
| 196 | ······version:·3.1.0 | ||
| 197 | ····systemd: | ||
| 198 | ······units: | ||
| 199 | ········-·name:·configure-crypto-policy.service | ||
| 200 | ··········enabled:·true | ||
| 201 | ··········contents:·| | ||
| 202 | ············[Unit] | ||
| 203 | ············Before=kubelet.service | ||
| 204 | ············[Service] | ||
| 205 | ············Type=oneshot | ||
| 206 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 207 | ············RemainAfterExit=yes | ||
| 208 | ············[Install] | ||
| 209 | ············WantedBy=multi-user.target | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | var_system_crypto_policy='DEFAULT' | ||
| 212 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 213 | rc=$? | ||
| 214 | if·test·"$rc"·=·127;·then | ||
| 215 | » echo·"$stderr_of_call"·>&2 | ||
| 216 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 217 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 218 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | elif·test·"$rc"·!=·0;·then | ||
| 221 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 222 | » false··#·end·with·an·error·code | ||
| 223 | fi | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 226 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 227 | Severity: ··medium | 232 | Severity: ··medium |
| 228 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 229 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 234 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 230 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 235 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 237, 14 lines modified | Offset 237, 19 lines modified | ||
| 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 241 | ············_\x8c_\x8i_\x8s······1.6.2 | 241 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1177975/1183578 bytes (99.53%) of diff not shown. | |||
| Offset 15193, 251 lines modified | Offset 15193, 251 lines modified | ||
| 0003b580:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b580:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b590:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003b590:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003b5a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b5a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b5b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b5b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b5c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b5c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b5d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b5d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b5e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b5e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b5f0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b600:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b610:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b620:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b630:·7365·2220·6964·3d22·6964·6d39·3235·3022··se"·id="idm9250" | |||
| 0003b640:·3e3c·7072·653e·3c63·6f64·653e·0a76·6172··><pre><code>.var | |||
| 0003b650:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b660:·6f6c·6963·793d·273c·6162·6272·2074·6974··olicy='<abbr·tit | |||
| 0003b670:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b680:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b690:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b6a0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b6b0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b6c0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b6d0:·554c·543c·2f61·6262·723e·270a·0a0a·7374··ULT</abbr>'...st | |||
| 0003b6e0:·6465·7272·5f6f·665f·6361·6c6c·3d24·2875··derr_of_call=$(u | |||
| 0003b6f0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003b700:·6963·6965·7320·2d2d·7365·7420·247b·7661··icies·--set·${va | |||
| 0003b710:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 0003b720:·706f·6c69·6379·7d20·3226·6774·3b26·616d··policy}·2>&am | |||
| 0003b730:·703b·3120·2667·743b·202f·6465·762f·6e75··p;1·>·/dev/nu | |||
| 0003b740:·6c6c·290a·7263·3d24·3f0a·0a69·6620·7465··ll).rc=$?..if·te | |||
| 0003b750:·7374·2022·2472·6322·203d·2031·3237·3b20··st·"$rc"·=·127;· | |||
| 0003b760:·7468·656e·0a09·6563·686f·2022·2473·7464··then..echo·"$std | |||
| 0003b770:·6572·725f·6f66·5f63·616c·6c22·2026·6774··err_of_call"·> | |||
| 0003b780:·3b26·616d·703b·320a·0965·6368·6f20·224d··;&2..echo·"M | |||
| 0003b790:·616b·6520·7375·7265·2074·6861·7420·7468··ake·sure·that·th | |||
| 0003b7a0:·6520·7363·7269·7074·2069·7320·696e·7374··e·script·is·inst | |||
| 0003b7b0:·616c·6c65·6420·6f6e·2074·6865·2072·656d··alled·on·the·rem | |||
| 0003b7c0:·6564·6961·7465·6420·7379·7374·656d·2e22··ediated·system." | |||
| 0003b7d0:·2026·6774·3b26·616d·703b·320a·0965·6368···>&2..ech | |||
| 0003b7e0:·6f20·2253·6565·206f·7574·7075·7420·6f66··o·"See·output·of | |||
| 0003b7f0:·2074·6865·2027·646e·6620·7072·6f76·6964···the·'dnf·provid | |||
| 0003b800:·6573·2075·7064·6174·652d·6372·7970·746f··es·update-crypto | |||
| 0003b810:·2d70·6f6c·6963·6965·7327·2063·6f6d·6d61··-policies'·comma | |||
| 0003b820:·6e64·2220·2667·743b·2661·6d70·3b32·0a09··nd"·>&2.. | |||
| 0003b830:·6563·686f·2022·746f·2073·6565·2077·6861··echo·"to·see·wha | |||
| 0003b840:·7420·7061·636b·6167·6520·746f·2028·7265··t·package·to·(re | |||
| 0003b850:·2969·6e73·7461·6c6c·2220·2667·743b·2661··)install"·>&a | |||
| 0003b860:·6d70·3b32·0a0a·0966·616c·7365·2020·2320··mp;2...false··#· | |||
| 0003b870:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003b880:·7220·636f·6465·0a65·6c69·6620·7465·7374··r·code.elif·test | |||
| 0003b890:·2022·2472·6322·2021·3d20·303b·2074·6865···"$rc"·!=·0;·the | |||
| 0003b8a0:·6e0a·0965·6368·6f20·2245·7272·6f72·2069··n..echo·"Error·i | |||
| 0003b8b0:·6e76·6f6b·696e·6720·7468·6520·7570·6461··nvoking·the·upda | |||
| 0003b8c0:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 0003b8d0:·6573·2073·6372·6970·743a·2024·7374·6465··es·script:·$stde | |||
| 0003b8e0:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003b8f0:·2661·6d70·3b32·0a09·6661·6c73·6520·2023··&2..false··# | |||
| 0003b900:·2065·6e64·2077·6974·6820·616e·2065·7272···end·with·an·err | |||
| 0003b910:·6f72·2063·6f64·650a·6669·0a3c·2f63·6f64··or·code.fi.</cod | |||
| 0003b920:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b930:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b940:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b950:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b960:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b970:·6d39·3235·3222·2074·6162·696e·6465·783d··m9252"·tabindex= | |||
| 0003b980:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b990:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b9a0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b9b0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b9c0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b9d0:·6564·6961·7469·6f6e·204b·7562·6572·6e65··ediation·Kuberne | |||
| 0003b9e0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0003b9f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ba00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ba10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ba20:·6964·6d39·3235·3222·3e3c·7461·626c·6520··idm9252"><table· | |||
| 0003ba30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003ba40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003ba50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003ba60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003ba70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003ba80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003baa0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003bab0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bac0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003bad0:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | |||
| 0003bae0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003baf0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003bb00:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003bb10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bb20:·653e·2d2d·2d0a·6170·6956·6572·7369·6f6e··e>---.apiVersion | |||
| 0003bb30:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 0003bb40:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 0003bb50:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 0003bb60:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 0003bb70:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 0003bb80:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 0003bb90:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 0003bba0:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 0003bbb0:·2075·6e69·7473·3a0a·2020·2020·2020·2020···units:.········ | |||
| 0003bbc0:·2d20·6e61·6d65·3a20·636f·6e66·6967·7572··-·name:·configur | |||
| 0003bbd0:·652d·6372·7970·746f·2d70·6f6c·6963·792e··e-crypto-policy. | |||
| 0003bbe0:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 0003bbf0:·2020·656e·6162·6c65·643a·2074·7275·650a····enabled:·true. | |||
| 0003bc00:·2020·2020·2020·2020·2020·636f·6e74·656e············conten | |||
| 0003bc10:·7473·3a20·7c0a·2020·2020·2020·2020·2020··ts:·|.·········· | |||
| 0003bc20:·2020·5b55·6e69·745d·0a20·2020·2020·2020····[Unit].······· | |||
| 0003bc30:·2020·2020·2042·6566·6f72·653d·6b75·6265·······Before=kube | |||
| 0003bc40:·6c65·742e·7365·7276·6963·650a·2020·2020··let.service.···· | |||
| 0003bc50:·2020·2020·2020·2020·5b53·6572·7669·6365··········[Service | |||
| 0003bc60:·5d0a·2020·2020·2020·2020·2020·2020·5479··].············Ty | |||
| 0003bc70:·7065·3d6f·6e65·7368·6f74·0a20·2020·2020··pe=oneshot.····· | |||
| 0003bc80:·2020·2020·2020·2045·7865·6353·7461·7274·········ExecStart | |||
| 0003bc90:·3d75·7064·6174·652d·6372·7970·746f·2d70··=update-crypto-p | |||
| 0003bca0:·6f6c·6963·6965·7320·2d2d·7365·7420·7b7b··olicies·--set·{{ | |||
| 0003bcb0:·2e76·6172·5f73·7973·7465·6d5f·6372·7970··.var_system_cryp | |||
| 0003bcc0:·746f·5f70·6f6c·6963·797d·7d0a·2020·2020··to_policy}}.···· | |||
| 0003bcd0:·2020·2020·2020·2020·5265·6d61·696e·4166··········RemainAf | |||
| 0003bce0:·7465·7245·7869·743d·7965·730a·2020·2020··terExit=yes.···· | |||
| 0003bcf0:·2020·2020·2020·2020·5b49·6e73·7461·6c6c··········[Install | |||
| 0003bd00:·5d0a·2020·2020·2020·2020·2020·2020·5761··].············Wa | |||
| 0003bd10:·6e74·6564·4279·3d6d·756c·7469·2d75·7365··ntedBy=multi-use | |||
| 0003bd20:·722e·7461·7267·6574·0a3c·2f63·6f64·653e··r.target.</code> | |||
| 0003bd30:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bd40:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bd50:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bd60:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| Max diff block lines reached; 8973148/9006434 bytes (99.63%) of diff not shown. | |||
| Offset 112, 14 lines modified | Offset 112, 58 lines modified | ||
| 112 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 112 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 113 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 113 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 114 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 114 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 116 | ············_\x8c_\x8i_\x8s······1.6.1 | 116 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | var_system_crypto_policy='DEFAULT' | ||
| 121 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 122 | rc=$? | ||
| 123 | if·test·"$rc"·=·127;·then | ||
| 124 | » echo·"$stderr_of_call"·>&2 | ||
| 125 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 126 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 127 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 128 | » false··#·end·with·an·error·code | ||
| 129 | elif·test·"$rc"·!=·0;·then | ||
| 130 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 131 | » false··#·end·with·an·error·code | ||
| 132 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 138 | --- | ||
| 139 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 140 | kind:·MachineConfig | ||
| 141 | spec: | ||
| 142 | ··config: | ||
| 143 | ····ignition: | ||
| 144 | ······version:·3.1.0 | ||
| 145 | ····systemd: | ||
| 146 | ······units: | ||
| 147 | ········-·name:·configure-crypto-policy.service | ||
| 148 | ··········enabled:·true | ||
| 149 | ··········contents:·| | ||
| 150 | ············[Unit] | ||
| 151 | ············Before=kubelet.service | ||
| 152 | ············[Service] | ||
| 153 | ············Type=oneshot | ||
| 154 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 155 | ············RemainAfterExit=yes | ||
| 156 | ············[Install] | ||
| 157 | ············WantedBy=multi-user.target | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 124 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 163 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 125 | ··set_fact: | 164 | ··set_fact: |
| Offset 170, 58 lines modified | Offset 214, 14 lines modified | ||
| 170 | ··-·PCI-DSSv4-2.2.7 | 214 | ··-·PCI-DSSv4-2.2.7 |
| 171 | ··-·configure_crypto_policy | 215 | ··-·configure_crypto_policy |
| 172 | ··-·high_severity | 216 | ··-·high_severity |
| 173 | ··-·low_complexity | 217 | ··-·low_complexity |
| 174 | ··-·low_disruption | 218 | ··-·low_disruption |
| 175 | ··-·no_reboot_needed | 219 | ··-·no_reboot_needed |
| 176 | ··-·restrict_strategy | 220 | ··-·restrict_strategy |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 182 | --- | ||
| 183 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 184 | kind:·MachineConfig | ||
| 185 | spec: | ||
| 186 | ··config: | ||
| 187 | ····ignition: | ||
| 188 | ······version:·3.1.0 | ||
| 189 | ····systemd: | ||
| 190 | ······units: | ||
| 191 | ········-·name:·configure-crypto-policy.service | ||
| 192 | ··········enabled:·true | ||
| 193 | ··········contents:·| | ||
| 194 | ············[Unit] | ||
| 195 | ············Before=kubelet.service | ||
| 196 | ············[Service] | ||
| 197 | ············Type=oneshot | ||
| 198 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 199 | ············RemainAfterExit=yes | ||
| 200 | ············[Install] | ||
| 201 | ············WantedBy=multi-user.target | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 203 | var_system_crypto_policy='DEFAULT' | ||
| 204 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 205 | rc=$? | ||
| 206 | if·test·"$rc"·=·127;·then | ||
| 207 | » echo·"$stderr_of_call"·>&2 | ||
| 208 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 209 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 210 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 211 | » false··#·end·with·an·error·code | ||
| 212 | elif·test·"$rc"·!=·0;·then | ||
| 213 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 214 | » false··#·end·with·an·error·code | ||
| 215 | fi | ||
| 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 221 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 222 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 218 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 223 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 219 | Severity: ··medium | 224 | Severity: ··medium |
| 220 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 225 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 221 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 226 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 222 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 227 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 229, 14 lines modified | Offset 229, 19 lines modified | ||
| 229 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 229 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 230 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 230 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 231 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 232 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 233 | ············_\x8c_\x8i_\x8s······1.6.2 | 233 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 234 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 235 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 235 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 875848/881451 bytes (99.36%) of diff not shown. | |||
| Offset 15234, 251 lines modified | Offset 15234, 251 lines modified | ||
| 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3932··a-target="#idm92 | ||
| 0003b820:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b820:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b880:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b890:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3932·3530·223e··e"·id="idm9250"> | |||
| 0003b8d0:·3c70·7265·3e3c·636f·6465·3e0a·7661·725f··<pre><code>.var_ | |||
| 0003b8e0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 0003b8f0:·6c69·6379·3d27·3c61·6262·7220·7469·746c··licy='<abbr·titl | |||
| 0003b900:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b910:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b920:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b930:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b880:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b890:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b8a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8b0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8c0:·6170·7365·2220·6964·3d22·6964·6d39·3235··apse"·id="idm925 | |||
| 0003b8d0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b8e0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8f0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b900:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b910:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b920:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b930:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b940:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b950:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b970:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b980:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b990:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b9a0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003b9b0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b9c0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b9d0:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | |||
| 0003b9 | 0003b940:·5f76·6172·5f73·7973·7465·6d5f·6372·7970··_var_system_cryp | ||
| 0003b9f0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| 0003ba00:·6f74·6520·746f·2076·6172·6961·626c·650a··ote·to·variable. | |||
| 0003b | 0003b950:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | ||
| 0003b960:·4c54·3c2f·6162·6272·3e27·0a0a·0a73·7464··LT</abbr>'...std | |||
| 0003b970:·6572·725f·6f66·5f63·616c·6c3d·2428·7570··err_of_call=$(up | |||
| 0003b980:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 0003b990:·6369·6573·202d·2d73·6574·2024·7b76·6172··cies·--set·${var | |||
| 0003b9a0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 0003b9b0:·6f6c·6963·797d·2032·2667·743b·2661·6d70··olicy}·2>& | |||
| 0003b9c0:·3b31·2026·6774·3b20·2f64·6576·2f6e·756c··;1·>·/dev/nul | |||
| 0003b9d0:·6c29·0a72·633d·243f·0a0a·6966·2074·6573··l).rc=$?..if·tes | |||
| 0003b9e0:·7420·2224·7263·2220·3d20·3132·373b·2074··t·"$rc"·=·127;·t | |||
| 0003b9f0:·6865·6e0a·0965·6368·6f20·2224·7374·6465··hen..echo·"$stde | |||
| 0003ba00:·7272·5f6f·665f·6361·6c6c·2220·2667·743b··rr_of_call"·> | |||
| 0003ba10:·2661·6d70·3b32·0a09·6563·686f·2022·4d61··&2..echo·"Ma | |||
| 0003ba20:·6b65·2073·7572·6520·7468·6174·2074·6865··ke·sure·that·the | |||
| 0003ba30:·2073·6372·6970·7420·6973·2069·6e73·7461···script·is·insta | |||
| 0003ba40:·6c6c·6564·206f·6e20·7468·6520·7265·6d65··lled·on·the·reme | |||
| 0003ba50:·6469·6174·6564·2073·7973·7465·6d2e·2220··diated·system."· | |||
| 0003ba60:·2667·743b·2661·6d70·3b32·0a09·6563·686f··>&2..echo | |||
| 0003ba70:·2022·5365·6520·6f75·7470·7574·206f·6620···"See·output·of· | |||
| 0003ba80:·7468·6520·2764·6e66·2070·726f·7669·6465··the·'dnf·provide | |||
| 0003ba90:·7320·7570·6461·7465·2d63·7279·7074·6f2d··s·update-crypto- | |||
| 0003baa0:·706f·6c69·6369·6573·2720·636f·6d6d·616e··policies'·comman | |||
| 0003bab0:·6422·2026·6774·3b26·616d·703b·320a·0965··d"·>&2..e | |||
| 0003bac0:·6368·6f20·2274·6f20·7365·6520·7768·6174··cho·"to·see·what | |||
| 0003bad0:·2070·6163·6b61·6765·2074·6f20·2872·6529···package·to·(re) | |||
| 0003bae0:·696e·7374·616c·6c22·2026·6774·3b26·616d··install"·>&am | |||
| 0003baf0:·703b·320a·0a09·6661·6c73·6520·2023·2065··p;2...false··#·e | |||
| 0003bb00:·6e64·2077·6974·6820·616e·2065·7272·6f72··nd·with·an·error | |||
| 0003bb10:·2063·6f64·650a·656c·6966·2074·6573·7420···code.elif·test· | |||
| 0003bb20:·2224·7263·2220·213d·2030·3b20·7468·656e··"$rc"·!=·0;·then | |||
| 0003bb30:·0a09·6563·686f·2022·4572·726f·7220·696e··..echo·"Error·in | |||
| 0003bb40:·766f·6b69·6e67·2074·6865·2075·7064·6174··voking·the·updat | |||
| 0003bb50:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 0003bb60:·7320·7363·7269·7074·3a20·2473·7464·6572··s·script:·$stder | |||
| 0003bb70:·725f·6f66·5f63·616c·6c22·2026·6774·3b26··r_of_call"·>& | |||
| 0003bb80:·616d·703b·320a·0966·616c·7365·2020·2320··amp;2..false··#· | |||
| 0003bb90:·656e·6420·7769·7468·2061·6e20·6572·726f··end·with·an·erro | |||
| 0003bba0:·7220·636f·6465·0a66·690a·3c2f·636f·6465··r·code.fi.</code | |||
| 0003bbb0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bbc0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bbd0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bbe0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bbf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bc00:·3932·3532·2220·7461·6269·6e64·6578·3d22··9252"·tabindex=" | |||
| 0003bc10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bc20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bc30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bc40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bc50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bc60:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0003bc70:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003bc80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bc90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bca0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bcb0:·646d·3932·3532·223e·3c74·6162·6c65·2063··dm9252"><table·c | |||
| 0003bcc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bcd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bce0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bcf0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bd00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bd10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bd20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bd30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003bd40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bd50:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bd60:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 0003bd70:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bd80:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | |||
| 0003bd90:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | |||
| 0003bda0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003bdb0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003bdc0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003bdd0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003bde0:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003bdf0:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003be00:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003be10:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003be20:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003be30:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003be40:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003be50:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003be60:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003be70:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| Max diff block lines reached; 10277672/10310958 bytes (99.68%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 58 lines modified | ||
| 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 120 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 121 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 122 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 124 | ············_\x8c_\x8i_\x8s······1.6.1 | 124 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | var_system_crypto_policy='DEFAULT' | ||
| 129 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 130 | rc=$? | ||
| 131 | if·test·"$rc"·=·127;·then | ||
| 132 | » echo·"$stderr_of_call"·>&2 | ||
| 133 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 134 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 135 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 136 | » false··#·end·with·an·error·code | ||
| 137 | elif·test·"$rc"·!=·0;·then | ||
| 138 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 139 | » false··#·end·with·an·error·code | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 146 | --- | ||
| 147 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 148 | kind:·MachineConfig | ||
| 149 | spec: | ||
| 150 | ··config: | ||
| 151 | ····ignition: | ||
| 152 | ······version:·3.1.0 | ||
| 153 | ····systemd: | ||
| 154 | ······units: | ||
| 155 | ········-·name:·configure-crypto-policy.service | ||
| 156 | ··········enabled:·true | ||
| 157 | ··········contents:·| | ||
| 158 | ············[Unit] | ||
| 159 | ············Before=kubelet.service | ||
| 160 | ············[Service] | ||
| 161 | ············Type=oneshot | ||
| 162 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 163 | ············RemainAfterExit=yes | ||
| 164 | ············[Install] | ||
| 165 | ············WantedBy=multi-user.target | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 132 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 171 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 133 | ··set_fact: | 172 | ··set_fact: |
| Offset 178, 58 lines modified | Offset 222, 14 lines modified | ||
| 178 | ··-·PCI-DSSv4-2.2.7 | 222 | ··-·PCI-DSSv4-2.2.7 |
| 179 | ··-·configure_crypto_policy | 223 | ··-·configure_crypto_policy |
| 180 | ··-·high_severity | 224 | ··-·high_severity |
| 181 | ··-·low_complexity | 225 | ··-·low_complexity |
| 182 | ··-·low_disruption | 226 | ··-·low_disruption |
| 183 | ··-·no_reboot_needed | 227 | ··-·no_reboot_needed |
| 184 | ··-·restrict_strategy | 228 | ··-·restrict_strategy |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 190 | --- | ||
| 191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 192 | kind:·MachineConfig | ||
| 193 | spec: | ||
| 194 | ··config: | ||
| 195 | ····ignition: | ||
| 196 | ······version:·3.1.0 | ||
| 197 | ····systemd: | ||
| 198 | ······units: | ||
| 199 | ········-·name:·configure-crypto-policy.service | ||
| 200 | ··········enabled:·true | ||
| 201 | ··········contents:·| | ||
| 202 | ············[Unit] | ||
| 203 | ············Before=kubelet.service | ||
| 204 | ············[Service] | ||
| 205 | ············Type=oneshot | ||
| 206 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 207 | ············RemainAfterExit=yes | ||
| 208 | ············[Install] | ||
| 209 | ············WantedBy=multi-user.target | ||
| 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 211 | var_system_crypto_policy='DEFAULT' | ||
| 212 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 213 | rc=$? | ||
| 214 | if·test·"$rc"·=·127;·then | ||
| 215 | » echo·"$stderr_of_call"·>&2 | ||
| 216 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 217 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 218 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 219 | » false··#·end·with·an·error·code | ||
| 220 | elif·test·"$rc"·!=·0;·then | ||
| 221 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 222 | » false··#·end·with·an·error·code | ||
| 223 | fi | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 229 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 230 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 226 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 231 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 227 | Severity: ··medium | 232 | Severity: ··medium |
| 228 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 233 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 229 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 234 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 230 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 235 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 237, 14 lines modified | Offset 237, 19 lines modified | ||
| 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 237 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 238 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 241 | ············_\x8c_\x8i_\x8s······1.6.2 | 241 | ············_\x8c_\x8i_\x8s······1.6.2 |
| 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 242 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 243 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1079034/1084637 bytes (99.48%) of diff not shown. | |||
| Offset 15238, 283 lines modified | Offset 15238, 283 lines modified | ||
| 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b860:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | 0003b860:·3d22·2369·646d·3834·3830·2220·7461·6269··="#idm8480"·tabi | ||
| 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b870:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b880:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b890:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b8a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b8b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b8c0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b8d0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b8e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b8f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b900:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b910:·3d22·6964·6d38·3438·3022·3e3c·7461·626c··="idm8480"><tabl | |||
| 0003b920:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b930:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b940:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b950:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b960:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b970:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b980:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b | 0003b8d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b8e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b8f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b900:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b910:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b920:·3438·3022·3e3c·7072·653e·3c63·6f64·653e··480"><pre><code> | |||
| 0003b930:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b940:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b950:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b960:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b970:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b980:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b990:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b9b0:·3834·3831·2220·7461·6269·6e64·6578·3d22··8481"·tabindex=" | |||
| 0003b9c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b9d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b9e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b9f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba00:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba10:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ba20:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba50:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003ba60:·3831·223e·3c74·6162·6c65·2063·6c61·7373··81"><table·class | |||
| 0003ba70:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ba80:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ba90:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003baa0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bab0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003bac0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b9b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003bad0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bae0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003baf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003bb00:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bb10:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bb20:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bb30:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bb40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bb50:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b9f0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ba00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba10:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ba20:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ba30:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003ba40:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003ba50:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003ba60:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003ba70:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003ba80:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003ba90:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003baa0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bab0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bac0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bad0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bae0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003baf0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb00:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb10:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb20:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb30:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bb40:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bb50:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bb60:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bb70:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bb80:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bb90:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bba0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bbb0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bbc0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bbd0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003bbe0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bbf0:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003bc00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bc40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bc50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bc60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bc70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bc80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bc90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bca0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bcb0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bcc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bcd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bce0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bcf0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bd00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bd10:·743d·2223·6964·6d38·3438·3122·2074·6162··t="#idm8481"·tab | |||
| 0003bd20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bd30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bd40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bd50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bd60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bd70:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bd80:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bd90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bda0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bdb0:·6170·7365·2220·6964·3d22·6964·6d38·3438··apse"·id="idm848 | |||
| 0003bdc0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bdd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bde0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bdf0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| Max diff block lines reached; 26048500/26086202 bytes (99.86%) of diff not shown. | |||
| Offset 15200, 282 lines modified | Offset 15200, 282 lines modified | ||
| 0003b5f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b5f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b600:·6d38·3438·3022·2074·6162·696e·6465·783d··m8480"·tabindex= | 0003b600:·6d38·3438·3022·2074·6162·696e·6465·783d··m8480"·tabindex= | ||
| 0003b610:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b610:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b620:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b620:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b630:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b630:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b640:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b640:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b650:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b650:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b660:·6564·6961·7469·6f6e·204 | 0003b660:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b670:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b680:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b690:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b6a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b6b0:·3834·3830·223e·3c74·6162·6c65·2063·6c61··8480"><table·cla | |||
| 0003b6c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b6d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b6e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b6f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b700:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b710:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003b670:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b680:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b690:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b6a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b6b0:·6522·2069·643d·2269·646d·3834·3830·223e··e"·id="idm8480"> | |||
| 0003b6c0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b6d0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b6e0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b6f0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b700:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b710:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b720:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b730:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b740:·6172·6765·743d·2223·6964·6d38·3438·3122··arget="#idm8481" | |||
| 0003b750:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b760:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b770:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b780:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b790:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b7a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b7b0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b7c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b7d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b7e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b7f0:·2220·6964·3d22·6964·6d38·3438·3122·3e3c··"·id="idm8481">< | |||
| 0003b800:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b810:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b820:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b830:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b840:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b850:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b860:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b750:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b760:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b | 0003b870:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b880:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b890:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b | 0003b8a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b8b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b8c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b8d0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b8e0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b8f0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b900:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b910:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b920:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b930:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b940:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b950:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003b790:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b7a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b7b0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b7c0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b7d0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b7e0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b7f0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003b800:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b810:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003b820:·392d·3635·3130·3130·0a20·202d·204e·4953··9-651010.··-·NIS | |||
| 0003b830:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b840:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b850:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b860:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b870:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b880:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b890:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b8a0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b8b0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b8c0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b8d0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b8e0:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b8f0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b900:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b910:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b920:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b930:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b940:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b950:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b960:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b970:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b980:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003b990:·4c2d·3039·2d36·3531·3031·300a·2020·2d20··L-09-651010.··-· | |||
| 0003b9a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b9b0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b9c0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b9d0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b9e0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b9f0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003ba00:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003ba10:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003ba20:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003ba30:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003ba40:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003ba50:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b960:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003b970:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003b980:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003b990:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003b9a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b | 0003b9b0:·3834·3832·2220·7461·6269·6e64·6578·3d22··8482"·tabindex=" | ||
| 0003b | 0003b9c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b | 0003b9d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b | 0003b9e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b | 0003b9f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b | 0003ba00:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b | 0003ba10:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003b | 0003ba20:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b | 0003ba30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| Max diff block lines reached; 11607640/11645204 bytes (99.68%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 60 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····dnf·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 175 | ··package_facts: |
| Offset 167, 60 lines modified | Offset 213, 14 lines modified | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | package·install·aide | 218 | package·install·aide |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 183 | if·rpm·--quiet·-q·kernel;·then | ||
| 184 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 185 | ····dnf·install·-y·"aide" | ||
| 186 | fi | ||
| 187 | else | ||
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 189 | fi | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | dnf·install·aide | ||
| 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 201 | include·install_aide | ||
| 202 | class·install_aide·{ | ||
| 203 | ··package·{·'aide': | ||
| 204 | ····ensure·=>·'installed', | ||
| 205 | ··} | ||
| 206 | } | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | package·--add=aide | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Run·the·following·command·to·generate·a·new·database: | 220 | Run·the·following·command·to·generate·a·new·database: |
| 215 | $·sudo·/usr/sbin/aide·--init | 221 | $·sudo·/usr/sbin/aide·--init |
| 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 222 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 223 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 218 | To·initiate·a·manual·check,·run·the·following·command: | 224 | To·initiate·a·manual·check,·run·the·following·command: |
| 219 | $·sudo·/usr/sbin/aide·--check | 225 | $·sudo·/usr/sbin/aide·--check |
| Offset 239, 14 lines modified | Offset 239, 28 lines modified | ||
| 239 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 239 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 240 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 241 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 242 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 242 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 243 | ············_\x8c_\x8i_\x8s············6.1.1 | 243 | ············_\x8c_\x8i_\x8s············6.1.1 |
| Max diff block lines reached; 1370575/1375607 bytes (99.63%) of diff not shown. | |||
| Offset 15191, 283 lines modified | Offset 15191, 283 lines modified | ||
| 0003b560:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b560:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b570:·743d·2223·6964·6d38·3438·3022·2074·6162··t="#idm8480"·tab | 0003b570:·743d·2223·6964·6d38·3438·3022·2074·6162··t="#idm8480"·tab | ||
| 0003b580:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b580:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b590:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b590:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b5a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b5a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b5b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b5b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b5c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b5c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b5d0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b5d0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b5e0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b5f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b | 0003b5e0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003b5f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b600:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b610:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b620:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b630:·3834·3830·223e·3c70·7265·3e3c·636f·6465··8480"><pre><code | |||
| 0003b640:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b650:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b660:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b670:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b680:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b690:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b6a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b6b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b6c0:·6d38·3438·3122·2074·6162·696e·6465·783d··m8481"·tabindex= | |||
| 0003b6d0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b6e0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b6f0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b700:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b710:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b720:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b730:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b740:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003b750:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b760:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b770:·3438·3122·3e3c·7461·626c·6520·636c·6173··481"><table·clas | |||
| 0003b780:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b790:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b7a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b7b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b7c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b620:·643d·2269·646d·3834·3830·223e·3c74·6162··d="idm8480"><tab | |||
| 0003b630:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b640:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b650:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b660:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b670:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b680:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b6a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b7d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b6c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b7e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b7f0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b | 0003b800:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b810:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b820:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b830:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b840:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b850:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b860:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b6f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b700:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b710:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b720:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b730:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b740:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b750:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b760:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b770:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b780:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b790:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b7a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b7b0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b7c0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b7d0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b7e0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b7f0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b800:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b810:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b820:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b830:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b840:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b850:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b860:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b870:·6 | 0003b870:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | ||
| 0003b880:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b890:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b8a0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b8b0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b8c0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b880:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b890:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b8a0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b8b0:·7768·656e·3a20·2722·6b65·726e·656c·2220··when:·'"kernel"· | |||
| 0003b8c0:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003b8d0:·2e70·6163·6b61·6765·7327·0a20·2074·6167··.packages'.··tag | |||
| 0003b8e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b8f0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b900:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b910:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b920:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b930:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b940:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b950:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b960:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b970:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b980:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b990:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b9a0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b9b0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b9c0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b | 0003b8d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003b8e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003b8f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003b900:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003b910:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003b920:·3d22·2369·646d·3834·3832·2220·7461·6269··="#idm8482"·tabi | ||
| 0003b | 0003b930:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003b940:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003b950:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b | 0003b960:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003b970:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b | 0003b980:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b | 0003b990:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b | 0003b9a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b9b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| Max diff block lines reached; 11220576/11258278 bytes (99.67%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 60 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 149 | if·rpm·--quiet·-q·kernel;·then | ||
| 150 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 151 | ····dnf·install·-y·"aide" | ||
| 152 | fi | ||
| 153 | else | ||
| 154 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 155 | fi | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·--add=aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | dnf·install·aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Gather·the·package·facts | 173 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 174 | ··package_facts: |
| Offset 166, 60 lines modified | Offset 212, 14 lines modified | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | package·install·aide | 217 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····dnf·install·-y·"aide" | ||
| 185 | fi | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | include·install_aide | ||
| 201 | class·install_aide·{ | ||
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 213 | Run·the·following·command·to·generate·a·new·database: | 219 | Run·the·following·command·to·generate·a·new·database: |
| 214 | $·sudo·/usr/sbin/aide·--init | 220 | $·sudo·/usr/sbin/aide·--init |
| 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 216 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 222 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 217 | To·initiate·a·manual·check,·run·the·following·command: | 223 | To·initiate·a·manual·check,·run·the·following·command: |
| 218 | $·sudo·/usr/sbin/aide·--check | 224 | $·sudo·/usr/sbin/aide·--check |
| Offset 238, 14 lines modified | Offset 238, 28 lines modified | ||
| 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 238 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 239 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 240 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 241 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 241 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 242 | ············_\x8c_\x8i_\x8s············6.1.1 | 242 | ············_\x8c_\x8i_\x8s············6.1.1 |
| Max diff block lines reached; 1316600/1321632 bytes (99.62%) of diff not shown. | |||
| Offset 15230, 282 lines modified | Offset 15230, 282 lines modified | ||
| 0003b7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b7e0:·3834·3830·2220·7461·6269·6e64·6578·3d22··8480"·tabindex=" | 0003b7e0:·3834·3830·2220·7461·6269·6e64·6578·3d22··8480"·tabindex=" | ||
| 0003b7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b840:·6469·6174·696f·6e20·4 | 0003b840:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b850:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b860:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b870:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b880:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b890:·3438·3022·3e3c·7461·626c·6520·636c·6173··480"><table·clas | |||
| 0003b8a0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b8b0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b8c0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b8d0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b8e0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b8f0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b | 0003b850:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b860:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b870:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b880:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b890:·2220·6964·3d22·6964·6d38·3438·3022·3e3c··"·id="idm8480">< | |||
| 0003b8a0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b8b0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b8c0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b8d0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b8e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b8f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b900:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b910:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b920:·7267·6574·3d22·2369·646d·3834·3831·2220··rget="#idm8481"· | |||
| 0003b930:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b940:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b950:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b960:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b970:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b980:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b990:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b9a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b9b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b9c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b9d0:·2069·643d·2269·646d·3834·3831·223e·3c74···id="idm8481"><t | |||
| 0003b9e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b9f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ba00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ba10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ba20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003ba30:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003ba40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba50:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003ba60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ba70:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ba80:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b | 0003ba90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003baa0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bab0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bac0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bad0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b930:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b940:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b950:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b960:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b970:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b980:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b990:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b9a0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b9b0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b9c0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b9d0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b9e0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b9f0:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003ba00:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003ba10:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003ba20:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003ba30:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003ba40:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003ba50:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003ba60:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003ba70:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ba80:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ba90:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003baa0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bab0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bac0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003bad0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bae0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003baf0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bb00:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bb10:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bb20:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bb30:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bb40:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bb50:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bb60:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bb70:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003bb80:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bb90:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bba0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bbb0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bbc0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003bbd0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003bbe0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003bbf0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003bc00:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003bc10:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003bc20:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003bc30:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003bc40:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003bc50:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003bc60:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003bc70:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003bc80:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bc90:·6d38·3438·3122·2074·6162·696e·6465·783d··m8481"·tabindex= | |||
| 0003bca0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bcb0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bcc0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bcd0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bce0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bcf0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003bd00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bd30:·6964·3d22·6964·6d38·3438·3122·3e3c·7461··id="idm8481"><ta | |||
| 0003bd40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bd50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| Max diff block lines reached; 25842568/25880132 bytes (99.85%) of diff not shown. | |||
| Offset 15836, 251 lines modified | Offset 15836, 251 lines modified | ||
| 0003ddb0:·7267·6574·3d22·2369·646d·3931·3633·2220··rget="#idm9163"· | 0003ddb0:·7267·6574·3d22·2369·646d·3931·3633·2220··rget="#idm9163"· | ||
| 0003ddc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003ddc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ddd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003ddd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003dde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003dde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ddf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003ddf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003de00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003de00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003de10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003de10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003de20:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003de30:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003de40:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003de50:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003de60:·2220·6964·3d22·6964·6d39·3136·3322·3e3c··"·id="idm9163">< | |||
| 0003de70:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003de80:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003de90:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003dea0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003deb0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003dec0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003ded0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003dee0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003def0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003df00:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003df10:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003df20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003df30:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003df40:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003df50:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003df60:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003df70:·6e73·7572·6520·6372·7970·746f·2d70·6f6c··nsure·crypto-pol | |||
| 0003df80:·6963·6965·7320·6973·2069·6e73·7461·6c6c··icies·is·install | |||
| 0003df90:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003dfa0:·2020·6e61·6d65·3a20·6372·7970·746f·2d70····name:·crypto-p | |||
| 0003dfb0:·6f6c·6963·6965·730a·2020·2020·7374·6174··olicies.····stat | |||
| 0003dfc0:·653a·2070·7265·7365·6e74·0a20·2074·6167··e:·present.··tag | |||
| 0003dfd0:·733a·0a20·202d·2044·4953·412d·5354·4947··s:.··-·DISA-STIG | |||
| 0003dfe0:·2d52·4845·4c2d·3039·2d32·3135·3130·300a··-RHEL-09-215100. | |||
| 0003dff0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003e000:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003e010:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003e020:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003e030:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003e040:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003e050:·6564·0a20·202d·2070·6163·6b61·6765·5f63··ed.··-·package_c | |||
| 0003e060:·7279·7074·6f2d·706f·6c69·6369·6573·5f69··rypto-policies_i | |||
| 0003e070:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003e080:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003e090:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003e0a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003e0b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003e0c0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 0003e0d0:·3136·3422·2074·6162·696e·6465·783d·2230··164"·tabindex="0 | |||
| 0003e0e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003e0f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003e100:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003e110:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003e120:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003e130:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003e140:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003e150:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003e160:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003e170:·3d22·6964·6d39·3136·3422·3e3c·7461·626c··="idm9164"><tabl | |||
| 0003e180:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003e190:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003e1a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003e1b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003e1c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003e1d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003e1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003e1f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003e200:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e210:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003e220:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003e230:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003e240:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003e250:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003e260:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003e270:·6465·3e0a·7061·636b·6167·6520·696e·7374··de>.package·inst | |||
| 0003e280:·616c·6c20·6372·7970·746f·2d70·6f6c·6963··all·crypto-polic | |||
| 0003e290:·6965·730a·3c2f·636f·6465·3e3c·2f70·7265··ies.</code></pre | |||
| 0003e2a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003e2b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003e2c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003e2d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003e2e0:·7267·6574·3d22·2369·646d·3931·3635·2220··rget="#idm9165"· | |||
| 0003e2f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003e300:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003e310:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003e320:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003e330:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003e340:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003 | 0003de20:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003e3 | 0003de30:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 0003 | 0003de40:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003 | 0003de50:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003 | 0003de60:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003 | 0003de70:·6964·6d39·3136·3322·3e3c·7072·653e·3c63··idm9163"><pre><c | ||
| 0003 | 0003de80:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | ||
| 0003 | 0003de90:·5d0a·6e61·6d65·203d·2022·6372·7970·746f··].name·=·"crypto | ||
| 0003 | 0003dea0:·2d70·6f6c·6963·6965·7322·0a76·6572·7369··-policies".versi | ||
| 0003 | 0003deb0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | ||
| 0003 | 0003dec0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003 | 0003ded0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003 | 0003dee0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003 | 0003def0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003 | 0003df00:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003 | 0003df10:·3136·3422·2074·6162·696e·6465·783d·2230··164"·tabindex="0 | ||
| 0003 | 0003df20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003 | 0003df30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003 | 0003df40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003 | 0003df50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003 | 0003df60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003 | 0003df70:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | ||
| 0003 | 0003df80:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003 | 0003df90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003 | 0003dfa0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003 | 0003dfb0:·6170·7365·2220·6964·3d22·6964·6d39·3136··apse"·id="idm916 | ||
| 0003 | 0003dfc0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | ||
| 0003 | 0003dfd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003 | 0003dfe0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003 | 0003dff0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003e | 0003e000:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003e | 0003e010:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003e | 0003e020:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003e | 0003e030:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003e | 0003e040:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003e | 0003e050:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003e | 0003e060:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| Max diff block lines reached; 6815661/6848947 bytes (99.51%) of diff not shown. | |||
| Offset 170, 78 lines modified | Offset 170, 78 lines modified | ||
| 170 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 170 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 171 | Severity: ··medium | 171 | Severity: ··medium |
| 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 172 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 173 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 173 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 174 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 174 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 175 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 175 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 176 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 176 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | -·name:·Ensure·crypto-policies·is·installed | ||
| 183 | ··package: | ||
| 184 | ····name:·crypto-policies | ||
| 185 | ····state:·present | ||
| 186 | ··tags: | ||
| 187 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 188 | ··-·enable_strategy | ||
| 189 | ··-·low_complexity | ||
| 190 | ··-·low_disruption | ||
| 191 | ··-·medium_severity | ||
| 192 | ··-·no_reboot_needed | ||
| 193 | ··-·package_crypto-policies_installed | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 199 | package·install·crypto-policies | ||
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | [[packages]] | 178 | [[packages]] |
| 202 | name·=·"crypto-policies" | 179 | name·=·"crypto-policies" |
| 203 | version·=·"*" | 180 | version·=·"*" |
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | include·install_crypto-policies | ||
| 187 | class·install_crypto-policies·{ | ||
| 188 | ··package·{·'crypto-policies': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 209 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 197 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 210 | ····dnf·install·-y·"crypto-policies" | 198 | ····dnf·install·-y·"crypto-policies" |
| 211 | fi | 199 | fi |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 205 | package·--add=crypto-policies | ||
| 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 217 | dnf·install·crypto-policies | 211 | dnf·install·crypto-policies |
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | include·install_crypto-policies | ||
| 224 | class·install_crypto-policies·{ | ||
| 225 | ··package·{·'crypto-policies': | ||
| 226 | ····ensure·=>·'installed', | ||
| 227 | ··} | ||
| 228 | 217 | -·name:·Ensure·crypto-policies·is·installed | |
| 218 | ··package: | ||
| 219 | ····name:·crypto-policies | ||
| 220 | ····state:·present | ||
| 221 | ··tags: | ||
| 222 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 223 | ··-·enable_strategy | ||
| 224 | ··-·low_complexity | ||
| 225 | ··-·low_disruption | ||
| 226 | ··-·medium_severity | ||
| 227 | ··-·no_reboot_needed | ||
| 228 | ··-·package_crypto-policies_installed | ||
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 234 | package· | 234 | package·install·crypto-policies |
| 235 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 235 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 236 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 236 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 237 | $·sudo·update-crypto-policies·--set·FIPS | 237 | $·sudo·update-crypto-policies·--set·FIPS |
| 238 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 238 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 239 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 239 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 240 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 240 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 241 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 241 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 253, 14 lines modified | Offset 253, 58 lines modified | ||
| 253 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 253 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 254 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 254 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 255 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 255 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 256 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 256 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 257 | ············_\x8c_\x8i_\x8s······1.6.1 | 257 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 258 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 259 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 259 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 261 | var_system_crypto_policy='FIPS' | ||
| 262 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 263 | rc=$? | ||
| 264 | if·test·"$rc"·=·127;·then | ||
| 265 | » echo·"$stderr_of_call"·>&2 | ||
| 266 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| Max diff block lines reached; 919972/928463 bytes (99.09%) of diff not shown. | |||
| Offset 15267, 408 lines modified | Offset 15267, 408 lines modified | ||
| 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ba20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ba30:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | 0003ba30:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | ||
| 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ba40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ba50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ba60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ba70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ba80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ba90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003ba90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003baa0:·6 | 0003baa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003bab0:·3 | 0003bab0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bac0:· | 0003bac0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bad0:· | 0003bad0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bae0:· | 0003bae0:·6d38·3134·3122·3e3c·7072·653e·3c63·6f64··m8141"><pre><cod | ||
| 0003baf0:· | 0003baf0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003bb00:·6 | 0003bb00:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003bb10:·6 | 0003bb10:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003bb20:· | 0003bb20:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003bb30:· | 0003bb30:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bb40:· | 0003bb40:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003bb50:· | 0003bb50:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003bb60:·7 | 0003bb60:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003bb70:· | 0003bb70:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003bb80:· | 0003bb80:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bb90:· | 0003bb90:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003bba0:· | 0003bba0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003bbb0:· | 0003bbb0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003bbc0:· | 0003bbc0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003bbd0:· | 0003bbd0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003bbe0:·6 | 0003bbe0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003bbf0:· | 0003bbf0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003bc00:· | 0003bc00:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003bc10:·6 | 0003bc10:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003bc20:· | 0003bc20:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003bc30:·6 | 0003bc30:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003bc40:· | 0003bc40:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003bc50:· | 0003bc50:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003bc60:· | 0003bc60:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003bc70:· | 0003bc70:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003bc80:·2 | 0003bc80:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003bc90:· | 0003bc90:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003bca0:· | 0003bca0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003bcb0:·2 | 0003bcb0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003bcc0:· | 0003bcc0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003bcd0:· | 0003bcd0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003bce0:· | 0003bce0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003bcf0:· | 0003bcf0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003bd00:· | 0003bd00:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003bd10:·2 | 0003bd10:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003bd20:· | 0003bd20:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003bd30:·6 | 0003bd30:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003bd40:· | 0003bd40:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003bd50:· | 0003bd50:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003bd60:· | 0003bd60:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003bd70:·6 | 0003bd70:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003bd80:·7 | 0003bd80:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003bd90:· | 0003bd90:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003bda0:· | 0003bda0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003bdb0:· | 0003bdb0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003bdc0:·6 | 0003bdc0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003bdd0:· | 0003bdd0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003bde0:· | 0003bde0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003bdf0:·6 | 0003bdf0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003be00:· | 0003be00:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003be10:·6 | 0003be10:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003be20:· | 0003be20:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003be30:· | 0003be30:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003be40:· | 0003be40:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003be50:· | 0003be50:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003be60:·7 | 0003be60:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003be70:· | 0003be70:·3d22·2369·646d·3831·3432·2220·7461·6269··="#idm8142"·tabi | ||
| 0003be80:· | 0003be80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be90:· | 0003be90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003bea0:· | 0003bea0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003beb0:· | 0003beb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003bec0:· | 0003bec0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003bed0:· | 0003bed0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003bee0:· | 0003bee0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003bef0:· | 0003bef0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bf00:· | 0003bf00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bf10:· | 0003bf10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bf20:· | 0003bf20:·3d22·6964·6d38·3134·3222·3e3c·7461·626c··="idm8142"><tabl | ||
| 0003bf30:· | 0003bf30:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003bf40:· | 0003bf40:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003bf50:· | 0003bf50:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003bf60:· | 0003bf60:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003bf70:·3 | 0003bf70:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003bf80:· | 0003bf80:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003bf90:· | 0003bf90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003bfa0:· | 0003bfa0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003bfb0:· | 0003bfb0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003bfc0:· | 0003bfc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bfd0:· | 0003bfd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bfe0:·3 | 0003bfe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bff0:· | 0003bff0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c000:· | 0003c000:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003c010:· | 0003c010:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003c020:· | 0003c020:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003c030:·20 | 0003c030:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003c040:·6 | 0003c040:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003c050:·65 | 0003c050:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003c060:· | 0003c060:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003c070:·6 | 0003c070:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003c080:· | 0003c080:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003c090:· | 0003c090:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003c0a0:· | 0003c0a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c0b0:· | 0003c0b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c0c0:· | 0003c0c0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003c0d0:·20 | 0003c0d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c0e0:· | 0003c0e0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003c0f0:· | 0003c0f0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003c100:· | 0003c100:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c110:· | 0003c110:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003c120:· | 0003c120:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003c130:· | 0003c130:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003c140:· | 0003c140:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003c150:· | 0003c150:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003c160:· | 0003c160:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003c170:· | 0003c170:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003c180:· | 0003c180:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003c190:· | 0003c190:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003c1a0:· | 0003c1a0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003c1b0:·6 | 0003c1b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003c1c0:· | 0003c1c0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003c1d0:· | 0003c1d0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003c1e0:·7 | 0003c1e0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003c1f0:· | 0003c1f0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 6800676/6855628 bytes (99.20%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 132 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 133 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 134 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 135 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 136 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 147 | ··package_facts: |
| Offset 295, 33 lines modified | Offset 314, 14 lines modified | ||
| 295 | ··-·PCI-DSSv4-11.5.2 | 314 | ··-·PCI-DSSv4-11.5.2 |
| 296 | ··-·high_complexity | 315 | ··-·high_complexity |
| 297 | ··-·high_severity | 316 | ··-·high_severity |
| 298 | ··-·medium_disruption | 317 | ··-·medium_disruption |
| 299 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 300 | ··-·restrict_strategy | 319 | ··-·restrict_strategy |
| 301 | ··-·rpm_verify_hashes | 320 | ··-·rpm_verify_hashes |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 304 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 305 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 306 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 307 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 308 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 309 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 310 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 311 | fi | ||
| 312 | else | ||
| 313 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 314 | fi | ||
| 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 316 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 322 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 317 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 323 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 318 | run·the·following·command·to·determine·which·package·owns·it: | 324 | run·the·following·command·to·determine·which·package·owns·it: |
| 319 | $·rpm·-qf·FILENAME | 325 | $·rpm·-qf·FILENAME |
| 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 321 | $·sudo·rpm·--restore·PACKAGENAME | 327 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 340, 14 lines modified | Offset 340, 46 lines modified | ||
| 340 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 340 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 341 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 341 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 342 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 342 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 343 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 343 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 344 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 344 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 346 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 346 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 352 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 353 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 354 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 355 | declare·-A·SETPERMS_RPM_DICT | ||
| 356 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 357 | #·is·expected·by·the·RPM·database | ||
| 358 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 359 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 360 | do | ||
| 361 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 362 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 363 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 364 | done | ||
| 365 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 366 | #·correct·values | ||
| 367 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 368 | do | ||
| 369 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 370 | done | ||
| 371 | else | ||
| 372 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 373 | fi | ||
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 352 | -·name:·Gather·the·package·facts | 379 | -·name:·Gather·the·package·facts |
| 353 | ··package_facts: | 380 | ··package_facts: |
| Offset 455, 46 lines modified | Offset 487, 14 lines modified | ||
| 455 | ··-·PCI-DSSv4-11.5.2 | 487 | ··-·PCI-DSSv4-11.5.2 |
| 456 | ··-·high_complexity | 488 | ··-·high_complexity |
| 457 | ··-·high_severity | 489 | ··-·high_severity |
| 458 | ··-·medium_disruption | 490 | ··-·medium_disruption |
| 459 | ··-·no_reboot_needed | 491 | ··-·no_reboot_needed |
| 460 | ··-·restrict_strategy | 492 | ··-·restrict_strategy |
| 461 | ··-·rpm_verify_ownership | 493 | ··-·rpm_verify_ownership |
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 738908/746619 bytes (98.97%) of diff not shown. | |||
| Offset 15288, 408 lines modified | Offset 15288, 408 lines modified | ||
| 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bb70:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bb80:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | 0003bb80:·2223·6964·6d38·3134·3122·2074·6162·696e··"#idm8141"·tabin | ||
| 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bb90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bba0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bbb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bbc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bbd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003bbe0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003bbf0:·6 | 0003bbf0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003bc00:·3 | 0003bc00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bc10:· | 0003bc10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bc20:· | 0003bc20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bc30:· | 0003bc30:·6d38·3134·3122·3e3c·7072·653e·3c63·6f64··m8141"><pre><cod | ||
| 0003bc40:· | 0003bc40:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003bc50:·6 | 0003bc50:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003bc60:·6 | 0003bc60:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003bc70:· | 0003bc70:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003bc80:· | 0003bc80:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bc90:· | 0003bc90:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003bca0:· | 0003bca0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003bcb0:·7 | 0003bcb0:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003bcc0:· | 0003bcc0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003bcd0:· | 0003bcd0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003bce0:· | 0003bce0:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003bcf0:· | 0003bcf0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003bd00:· | 0003bd00:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003bd10:· | 0003bd10:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003bd20:· | 0003bd20:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003bd30:·6 | 0003bd30:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003bd40:· | 0003bd40:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003bd50:· | 0003bd50:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003bd60:·6 | 0003bd60:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003bd70:· | 0003bd70:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003bd80:·6 | 0003bd80:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003bd90:· | 0003bd90:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003bda0:· | 0003bda0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003bdb0:· | 0003bdb0:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003bdc0:· | 0003bdc0:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003bdd0:·2 | 0003bdd0:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003bde0:· | 0003bde0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003bdf0:· | 0003bdf0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003be00:·2 | 0003be00:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003be10:· | 0003be10:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003be20:· | 0003be20:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003be30:· | 0003be30:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003be40:· | 0003be40:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003be50:· | 0003be50:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003be60:·2 | 0003be60:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003be70:· | 0003be70:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003be80:·6 | 0003be80:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003be90:· | 0003be90:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003bea0:· | 0003bea0:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003beb0:· | 0003beb0:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003bec0:·6 | 0003bec0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003bed0:·7 | 0003bed0:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003bee0:· | 0003bee0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003bef0:· | 0003bef0:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003bf00:· | 0003bf00:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003bf10:·6 | 0003bf10:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003bf20:· | 0003bf20:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003bf30:· | 0003bf30:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003bf40:·6 | 0003bf40:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003bf50:· | 0003bf50:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003bf60:·6 | 0003bf60:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003bf70:· | 0003bf70:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003bf80:· | 0003bf80:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003bf90:· | 0003bf90:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003bfa0:· | 0003bfa0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003bfb0:·7 | 0003bfb0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bfc0:· | 0003bfc0:·3d22·2369·646d·3831·3432·2220·7461·6269··="#idm8142"·tabi | ||
| 0003bfd0:· | 0003bfd0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003bfe0:· | 0003bfe0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003bff0:· | 0003bff0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003c000:· | 0003c000:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003c010:· | 0003c010:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003c020:· | 0003c020:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003c030:· | 0003c030:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003c040:· | 0003c040:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003c050:· | 0003c050:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003c060:· | 0003c060:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003c070:· | 0003c070:·3d22·6964·6d38·3134·3222·3e3c·7461·626c··="idm8142"><tabl | ||
| 0003c080:· | 0003c080:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003c090:· | 0003c090:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003c0a0:· | 0003c0a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003c0b0:· | 0003c0b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003c0c0:·3 | 0003c0c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003c0d0:· | 0003c0d0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003c0e0:· | 0003c0e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c0f0:· | 0003c0f0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003c100:· | 0003c100:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003c110:· | 0003c110:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003c120:· | 0003c120:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003c130:·3 | 0003c130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c140:· | 0003c140:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c150:· | 0003c150:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003c160:· | 0003c160:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003c170:· | 0003c170:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003c180:·20 | 0003c180:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003c190:·6 | 0003c190:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003c1a0:·65 | 0003c1a0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003c1b0:· | 0003c1b0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003c1c0:·6 | 0003c1c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003c1d0:· | 0003c1d0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003c1e0:· | 0003c1e0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003c1f0:· | 0003c1f0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c200:· | 0003c200:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003c210:· | 0003c210:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003c220:·20 | 0003c220:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c230:· | 0003c230:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003c240:· | 0003c240:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003c250:· | 0003c250:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003c260:· | 0003c260:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003c270:· | 0003c270:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003c280:· | 0003c280:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003c290:· | 0003c290:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003c2a0:· | 0003c2a0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003c2b0:· | 0003c2b0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003c2c0:· | 0003c2c0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003c2d0:· | 0003c2d0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003c2e0:· | 0003c2e0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003c2f0:· | 0003c2f0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003c300:·6 | 0003c300:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003c310:· | 0003c310:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003c320:· | 0003c320:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003c330:·7 | 0003c330:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003c340:· | 0003c340:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 17291443/17346395 bytes (99.68%) of diff not shown. | |||
| Offset 126, 14 lines modified | Offset 126, 33 lines modified | ||
| 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 126 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 127 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 128 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 129 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 131 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 135 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 136 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 140 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 141 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 142 | fi | ||
| 143 | else | ||
| 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 145 | fi | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 138 | -·name:·Gather·the·package·facts | 151 | -·name:·Gather·the·package·facts |
| 139 | ··package_facts: | 152 | ··package_facts: |
| Offset 300, 33 lines modified | Offset 319, 14 lines modified | ||
| 300 | ··-·PCI-DSSv4-11.5.2 | 319 | ··-·PCI-DSSv4-11.5.2 |
| 301 | ··-·high_complexity | 320 | ··-·high_complexity |
| 302 | ··-·high_severity | 321 | ··-·high_severity |
| 303 | ··-·medium_disruption | 322 | ··-·medium_disruption |
| 304 | ··-·no_reboot_needed | 323 | ··-·no_reboot_needed |
| 305 | ··-·restrict_strategy | 324 | ··-·restrict_strategy |
| 306 | ··-·rpm_verify_hashes | 325 | ··-·rpm_verify_hashes |
| 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 308 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 309 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 310 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 311 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 312 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 313 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 314 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 315 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 316 | fi | ||
| 317 | else | ||
| 318 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 319 | fi | ||
| 320 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 321 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 327 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 322 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 328 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 323 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 329 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 324 | $·rpm·-qf·FILENAME | 330 | $·rpm·-qf·FILENAME |
| 325 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 331 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 347, 14 lines modified | Offset 347, 50 lines modified | ||
| 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 359 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 360 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 361 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 362 | declare·-A·SETPERMS_RPM_DICT | ||
| 363 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 364 | #·is·expected·by·the·RPM·database | ||
| 365 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 366 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 367 | do | ||
| 368 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 369 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 370 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 371 | ········do | ||
| 372 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 373 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 374 | ········done | ||
| 375 | done | ||
| 376 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 377 | #·correct·values | ||
| 378 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 379 | do | ||
| 380 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 381 | done | ||
| 382 | else | ||
| 383 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 384 | fi | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 359 | -·name:·Gather·the·package·facts | 390 | -·name:·Gather·the·package·facts |
| 360 | ··package_facts: | 391 | ··package_facts: |
| Offset 466, 50 lines modified | Offset 502, 14 lines modified | ||
| 466 | ··-·PCI-DSSv4-11.5.2 | 502 | ··-·PCI-DSSv4-11.5.2 |
| 467 | ··-·high_complexity | 503 | ··-·high_complexity |
| 468 | ··-·high_severity | 504 | ··-·high_severity |
| 469 | ··-·medium_disruption | 505 | ··-·medium_disruption |
| 470 | ··-·no_reboot_needed | 506 | ··-·no_reboot_needed |
| 471 | ··-·restrict_strategy | 507 | ··-·restrict_strategy |
| 472 | ··-·rpm_verify_permissions | 508 | ··-·rpm_verify_permissions |
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1334610/1342694 bytes (99.40%) of diff not shown. | |||
| Offset 15302, 408 lines modified | Offset 15302, 408 lines modified | ||
| 0003bc50:·7267·6574·3d22·2369·646d·3831·3431·2220··rget="#idm8141"· | 0003bc50:·7267·6574·3d22·2369·646d·3831·3431·2220··rget="#idm8141"· | ||
| 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bc60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bc70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bc80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bc90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bca0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bcb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bcc0:·6e20· | 0003bcc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003bcd0:· | 0003bcd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003bce0:· | 0003bce0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003bcf0:·6 | 0003bcf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003bd00:· | 0003bd00:·643d·2269·646d·3831·3431·223e·3c70·7265··d="idm8141"><pre | ||
| 0003bd10:· | 0003bd10:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003bd20:· | 0003bd20:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003bd30:· | 0003bd30:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003bd40:· | 0003bd40:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003bd50:· | 0003bd50:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003bd60:· | 0003bd60:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003bd70:·6 | 0003bd70:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003bd80:· | 0003bd80:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003bd90:·7 | 0003bd90:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003bda0:·6 | 0003bda0:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003bdb0:· | 0003bdb0:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003bdc0:·6 | 0003bdc0:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003bdd0:· | 0003bdd0:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003bde0:· | 0003bde0:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003bdf0:· | 0003bdf0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003be00:· | 0003be00:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003be10:·6 | 0003be10:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003be20:· | 0003be20:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003be30:· | 0003be30:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003be40:· | 0003be40:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003be50:· | 0003be50:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003be60:· | 0003be60:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003be70:· | 0003be70:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003be80:· | 0003be80:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003be90:· | 0003be90:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003bea0:· | 0003bea0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003beb0:· | 0003beb0:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003bec0:· | 0003bec0:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003bed0:·5 | 0003bed0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003bee0:· | 0003bee0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003bef0:·2 | 0003bef0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003bf00:· | 0003bf00:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003bf10:·2 | 0003bf10:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003bf20:· | 0003bf20:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003bf30:· | 0003bf30:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003bf40:· | 0003bf40:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003bf50:· | 0003bf50:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003bf60:· | 0003bf60:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003bf70:· | 0003bf70:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003bf80:· | 0003bf80:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003bf90:· | 0003bf90:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003bfa0:· | 0003bfa0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003bfb0:· | 0003bfb0:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003bfc0:· | 0003bfc0:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | ||
| 0003bfd0:·6 | 0003bfd0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003bfe0:· | 0003bfe0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003bff0:·20 | 0003bff0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003c000:· | 0003c000:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003c010:·2 | 0003c010:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003c020:·6 | 0003c020:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003c030:·6 | 0003c030:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003c040:·20 | 0003c040:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003c050:·6 | 0003c050:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003c060:· | 0003c060:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003c070:·7 | 0003c070:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003c080:·6 | 0003c080:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003c090:·6 | 0003c090:·6172·6765·743d·2223·6964·6d38·3134·3222··arget="#idm8142" | ||
| 0003c0a0:· | 0003c0a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c0b0:· | 0003c0b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c0c0:· | 0003c0c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c0d0:· | 0003c0d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c0e0:· | 0003c0e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c0f0:·6 | 0003c0f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c100:·6 | 0003c100:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003c110:· | 0003c110:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003c120:·6 | 0003c120:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003c130:· | 0003c130:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003c140:· | 0003c140:·6522·2069·643d·2269·646d·3831·3432·223e··e"·id="idm8142"> | ||
| 0003c150:· | 0003c150:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003c160:· | 0003c160:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003c170:· | 0003c170:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003c180:·2 | 0003c180:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003c190:· | 0003c190:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003c1a0:· | 0003c1a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003c1b0:· | 0003c1b0:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003c1c0:·3 | 0003c1c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c1d0:·2 | 0003c1d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003c1e0:· | 0003c1e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c1f0:· | 0003c1f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003c200:· | 0003c200:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003c210:· | 0003c210:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003c220:·3 | 0003c220:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003c230:·43 | 0003c230:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003c240:· | 0003c240:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003c250:· | 0003c250:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003c260:· | 0003c260:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003c270:· | 0003c270:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003c280:· | 0003c280:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003c290:· | 0003c290:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003c2a0:· | 0003c2a0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003c2b0:· | 0003c2b0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003c2c0:· | 0003c2c0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003c2d0:· | 0003c2d0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003c2e0:· | 0003c2e0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003c2f0:· | 0003c2f0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c300:· | 0003c300:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003c310:· | 0003c310:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003c320:·2 | 0003c320:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c330:· | 0003c330:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003c340:· | 0003c340:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003c350:· | 0003c350:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c360:· | 0003c360:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003c370:· | 0003c370:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003c380:· | 0003c380:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003c390:· | 0003c390:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003c3a0:· | 0003c3a0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003c3b0:· | 0003c3b0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003c3c0:· | 0003c3c0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003c3d0:· | 0003c3d0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003c3e0:·6 | 0003c3e0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003c3f0:· | 0003c3f0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003c400:·6 | 0003c400:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003c410:· | 0003c410:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003c420:· | 0003c420:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| Max diff block lines reached; 10128374/10183326 bytes (99.46%) of diff not shown. | |||
| Offset 128, 14 lines modified | Offset 128, 33 lines modified | ||
| 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 128 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 129 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 130 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 137 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 138 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 139 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 140 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 141 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 142 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 143 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·Gather·the·package·facts | 153 | -·name:·Gather·the·package·facts |
| 141 | ··package_facts: | 154 | ··package_facts: |
| Offset 302, 33 lines modified | Offset 321, 14 lines modified | ||
| 302 | ··-·PCI-DSSv4-11.5.2 | 321 | ··-·PCI-DSSv4-11.5.2 |
| 303 | ··-·high_complexity | 322 | ··-·high_complexity |
| 304 | ··-·high_severity | 323 | ··-·high_severity |
| 305 | ··-·medium_disruption | 324 | ··-·medium_disruption |
| 306 | ··-·no_reboot_needed | 325 | ··-·no_reboot_needed |
| 307 | ··-·restrict_strategy | 326 | ··-·restrict_strategy |
| 308 | ··-·rpm_verify_hashes | 327 | ··-·rpm_verify_hashes |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 311 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 312 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 313 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 314 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 315 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 316 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 317 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 318 | fi | ||
| 319 | else | ||
| 320 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 321 | fi | ||
| 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 323 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 329 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 324 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 330 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 325 | run·the·following·command·to·determine·which·package·owns·it: | 331 | run·the·following·command·to·determine·which·package·owns·it: |
| 326 | $·rpm·-qf·FILENAME | 332 | $·rpm·-qf·FILENAME |
| 327 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 333 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 328 | $·sudo·rpm·--restore·PACKAGENAME | 334 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 347, 14 lines modified | Offset 347, 46 lines modified | ||
| 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 347 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 348 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 349 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 350 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 351 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 352 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 353 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 359 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 360 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 361 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 362 | declare·-A·SETPERMS_RPM_DICT | ||
| 363 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 364 | #·is·expected·by·the·RPM·database | ||
| 365 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 366 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 367 | do | ||
| 368 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 369 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 370 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 371 | done | ||
| 372 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 373 | #·correct·values | ||
| 374 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 375 | do | ||
| 376 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 377 | done | ||
| 378 | else | ||
| 379 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 380 | fi | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 359 | -·name:·Gather·the·package·facts | 386 | -·name:·Gather·the·package·facts |
| 360 | ··package_facts: | 387 | ··package_facts: |
| Offset 462, 46 lines modified | Offset 494, 14 lines modified | ||
| 462 | ··-·PCI-DSSv4-11.5.2 | 494 | ··-·PCI-DSSv4-11.5.2 |
| 463 | ··-·high_complexity | 495 | ··-·high_complexity |
| 464 | ··-·high_severity | 496 | ··-·high_severity |
| 465 | ··-·medium_disruption | 497 | ··-·medium_disruption |
| 466 | ··-·no_reboot_needed | 498 | ··-·no_reboot_needed |
| 467 | ··-·restrict_strategy | 499 | ··-·restrict_strategy |
| 468 | ··-·rpm_verify_ownership | 500 | ··-·rpm_verify_ownership |
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 470 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 471 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 472 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 473 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1042876/1050587 bytes (99.27%) of diff not shown. | |||
| Offset 15804, 251 lines modified | Offset 15804, 251 lines modified | ||
| 0003dbb0:·6172·6765·743d·2223·6964·6d39·3136·3322··arget="#idm9163" | 0003dbb0:·6172·6765·743d·2223·6964·6d39·3136·3322··arget="#idm9163" | ||
| 0003dbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003dbc0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003dbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003dbd0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003dbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003dbe0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003dbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003dbf0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003dc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003dc00:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003dc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003dc10:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003dc20:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003dc30:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003dc40:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003dc50:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003dc60:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003dc70:·2269·646d·3931·3633·223e·3c70·7265·3e3c··"idm9163"><pre>< | |||
| 0003dc80:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003dc90:·5d5d·0a6e·616d·6520·3d20·2263·7279·7074··]].name·=·"crypt | |||
| 0003dca0:·6f2d·706f·6c69·6369·6573·220a·7665·7273··o-policies".vers | |||
| 0003dcb0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003dc20:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003dc30:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003dc40:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003dc50:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003dc60:·6522·2069·643d·2269·646d·3931·3633·223e··e"·id="idm9163"> | |||
| 0003dc70:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003dc80:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003dc90:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003dca0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003dcb0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003dcc0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003dcd0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003dce0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003dcf0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003dd00:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003dd10:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003dd20:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003dd30:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003dd40:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003dd50:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003dd60:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003dd70:·456e·7375·7265·2063·7279·7074·6f2d·706f··Ensure·crypto-po | |||
| 0003dd80:·6c69·6369·6573·2069·7320·696e·7374·616c··licies·is·instal | |||
| 0003dd90:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003dda0:·2020·206e·616d·653a·2063·7279·7074·6f2d·····name:·crypto- | |||
| 0003ddb0:·706f·6c69·6369·6573·0a20·2020·2073·7461··policies.····sta | |||
| 0003ddc0:·7465·3a20·7072·6573·656e·740a·2020·7461··te:·present.··ta | |||
| 0003ddd0:·6773·3a0a·2020·2d20·4449·5341·2d53·5449··gs:.··-·DISA-STI | |||
| 0003dde0:·472d·5248·454c·2d30·392d·3231·3531·3030··G-RHEL-09-215100 | |||
| 0003ddf0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003de00:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003de10:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003de20:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003de30:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003de40:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003de50:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003de60:·6372·7970·746f·2d70·6f6c·6963·6965·735f··crypto-policies_ | |||
| 0003de70:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003d | 0003dcc0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003d | 0003dcd0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003d | 0003dce0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003d | 0003dcf0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003d | 0003dd00:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003d | 0003dd10:·3931·3634·2220·7461·6269·6e64·6578·3d22··9164"·tabindex=" | ||
| 0003d | 0003dd20:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003d | 0003dd30:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003d | 0003dd40:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003d | 0003dd50:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003d | 0003dd60:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003dd70:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003dd80:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003dd90:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003dda0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ddb0:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003ddc0:·3634·223e·3c74·6162·6c65·2063·6c61·7373··64"><table·class | |||
| 0003ddd0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003dde0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ddf0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003de00:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003de10:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003de20:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003de30:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003de40:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003de50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003de60:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003df30:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003df40:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003df50:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003df60:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003df70:·643d·2269·646d·3931·3634·223e·3c74·6162··d="idm9164"><tab | |||
| 0003df80:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003df90:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003dfa0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003dfb0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003dfc0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003dfd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003dfe0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003dff0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003e000:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e010:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003e020:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003e030:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003e040:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003 | 0003de70:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003e060:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003e070:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 0003e080:·7461·6c6c·2063·7279·7074·6f2d·706f·6c69··tall·crypto-poli | |||
| 0003e090:·6369·6573·0a3c·2f63·6f64·653e·3c2f·7072··cies.</code></pr | |||
| 0003e0a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003e0b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003e0c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003e0d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003e0e0:·6172·6765·743d·2223·6964·6d39·3136·3522··arget="#idm9165" | |||
| 0003e0f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003e100:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003e110:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003e120:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003e130:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003e140:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003e150:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003 | 0003de80:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003de90:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003dea0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003deb0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003dec0:·7564·6520·696e·7374·616c·6c5f·6372·7970··ude·install_cryp | |||
| 0003ded0:·746f·2d70·6f6c·6963·6965·730a·0a63·6c61··to-policies..cla | |||
| 0003dee0:·7373·2069·6e73·7461·6c6c·5f63·7279·7074··ss·install_crypt | |||
| 0003def0:·6f2d·706f·6c69·6369·6573·207b·0a20·2070··o-policies·{.··p | |||
| 0003df00:·6163·6b61·6765·207b·2027·6372·7970·746f··ackage·{·'crypto | |||
| 0003df10:·2d70·6f6c·6963·6965·7327·3a0a·2020·2020··-policies':.···· | |||
| Max diff block lines reached; 6814624/6847910 bytes (99.51%) of diff not shown. | |||
| Offset 161, 78 lines modified | Offset 161, 78 lines modified | ||
| 161 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 161 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 162 | Severity: ··medium | 162 | Severity: ··medium |
| 163 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 163 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 164 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 164 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 165 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 165 | References:·_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 166 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 166 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 167 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 167 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | -·name:·Ensure·crypto-policies·is·installed | ||
| 174 | ··package: | ||
| 175 | ····name:·crypto-policies | ||
| 176 | ····state:·present | ||
| 177 | ··tags: | ||
| 178 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 179 | ··-·enable_strategy | ||
| 180 | ··-·low_complexity | ||
| 181 | ··-·low_disruption | ||
| 182 | ··-·medium_severity | ||
| 183 | ··-·no_reboot_needed | ||
| 184 | ··-·package_crypto-policies_installed | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 190 | package·install·crypto-policies | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | [[packages]] | 169 | [[packages]] |
| 193 | name·=·"crypto-policies" | 170 | name·=·"crypto-policies" |
| 194 | version·=·"*" | 171 | version·=·"*" |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_crypto-policies | ||
| 178 | class·install_crypto-policies·{ | ||
| 179 | ··package·{·'crypto-policies': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 188 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 201 | ····dnf·install·-y·"crypto-policies" | 189 | ····dnf·install·-y·"crypto-policies" |
| 202 | fi | 190 | fi |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=crypto-policies | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 208 | dnf·install·crypto-policies | 202 | dnf·install·crypto-policies |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | include·install_crypto-policies | ||
| 215 | class·install_crypto-policies·{ | ||
| 216 | ··package·{·'crypto-policies': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | 208 | -·name:·Ensure·crypto-policies·is·installed | |
| 209 | ··package: | ||
| 210 | ····name:·crypto-policies | ||
| 211 | ····state:·present | ||
| 212 | ··tags: | ||
| 213 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 214 | ··-·enable_strategy | ||
| 215 | ··-·low_complexity | ||
| 216 | ··-·low_disruption | ||
| 217 | ··-·medium_severity | ||
| 218 | ··-·no_reboot_needed | ||
| 219 | ··-·package_crypto-policies_installed | ||
| 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 225 | package· | 225 | package·install·crypto-policies |
| 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 226 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 227 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 227 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 228 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 228 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 229 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 229 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 230 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 230 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 231 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 231 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 232 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 232 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 244, 14 lines modified | Offset 244, 58 lines modified | ||
| 244 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 244 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 245 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 245 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 246 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 246 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 247 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 247 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 248 | ············_\x8c_\x8i_\x8s······1.6.1 | 248 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 249 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 249 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 250 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 250 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 252 | var_system_crypto_policy='FIPS:OSPP' | ||
| 253 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 254 | rc=$? | ||
| 255 | if·test·"$rc"·=·127;·then | ||
| 256 | » echo·"$stderr_of_call"·>&2 | ||
| 257 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| Max diff block lines reached; 919977/928483 bytes (99.08%) of diff not shown. | |||
| Offset 15294, 408 lines modified | Offset 15294, 408 lines modified | ||
| 0003bbd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003bbd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003bbe0:·2369·646d·3831·3431·2220·7461·6269·6e64··#idm8141"·tabind | 0003bbe0:·2369·646d·3831·3431·2220·7461·6269·6e64··#idm8141"·tabind | ||
| 0003bbf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003bbf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003bc00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003bc00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003bc10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003bc10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003bc20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003bc20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003bc30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003bc30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003bc40:·5265·6d65·6469·6174·696f·6e20· | 0003bc40:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003bc50:·6 | 0003bc50:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003bc60:· | 0003bc60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003bc70:·7 | 0003bc70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003bc80:·6 | 0003bc80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003bc90:· | 0003bc90:·3831·3431·223e·3c70·7265·3e3c·636f·6465··8141"><pre><code | ||
| 0003bca0:· | 0003bca0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003bcb0:· | 0003bcb0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003bcc0:· | 0003bcc0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003bcd0:· | 0003bcd0:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003bce0:·7 | 0003bce0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003bcf0:· | 0003bcf0:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003bd00:· | 0003bd00:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003bd10:·727 | 0003bd10:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003bd20:·3 | 0003bd20:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003bd30:· | 0003bd30:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003bd40:· | 0003bd40:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003bd50:·7 | 0003bd50:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003bd60:· | 0003bd60:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003bd70:·6 | 0003bd70:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003bd80:· | 0003bd80:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003bd90:· | 0003bd90:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003bda0:· | 0003bda0:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003bdb0:·6 | 0003bdb0:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003bdc0:· | 0003bdc0:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003bdd0:·6 | 0003bdd0:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003bde0:· | 0003bde0:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003bdf0:· | 0003bdf0:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003be00:· | 0003be00:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003be10:· | 0003be10:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003be20:· | 0003be20:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003be30:· | 0003be30:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003be40:· | 0003be40:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003be50:· | 0003be50:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003be60:· | 0003be60:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003be70:· | 0003be70:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003be80:· | 0003be80:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003be90:· | 0003be90:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003bea0:· | 0003bea0:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003beb0:·20 | 0003beb0:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003bec0:· | 0003bec0:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003bed0:· | 0003bed0:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003bee0:·6 | 0003bee0:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003bef0:·2 | 0003bef0:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003bf00:· | 0003bf00:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003bf10:· | 0003bf10:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003bf20:· | 0003bf20:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003bf30:· | 0003bf30:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003bf40:· | 0003bf40:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003bf50:·6 | 0003bf50:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003bf60:·2 | 0003bf60:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003bf70:·6 | 0003bf70:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003bf80:· | 0003bf80:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003bf90:· | 0003bf90:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003bfa0:·6 | 0003bfa0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003bfb0:· | 0003bfb0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003bfc0:· | 0003bfc0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003bfd0:· | 0003bfd0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003bfe0:· | 0003bfe0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003bff0:·62 | 0003bff0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003c000:·6 | 0003c000:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003c010:· | 0003c010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003c020:· | 0003c020:·2223·6964·6d38·3134·3222·2074·6162·696e··"#idm8142"·tabin | ||
| 0003c030:· | 0003c030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003c040:· | 0003c040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003c050:·6 | 0003c050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003c060:· | 0003c060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003c070:·657 | 0003c070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003c080:· | 0003c080:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003c090:· | 0003c090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003c0a0:· | 0003c0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c0b0:· | 0003c0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c0c0:· | 0003c0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c0d0:·22 | 0003c0d0:·2269·646d·3831·3432·223e·3c74·6162·6c65··"idm8142"><table | ||
| 0003c0e0:·20 | 0003c0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003c0f0:· | 0003c0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003c100:· | 0003c100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003c110:· | 0003c110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003c120:·3 | 0003c120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003c130:·2 | 0003c130:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003c140:· | 0003c140:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003c150:· | 0003c150:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003c160:· | 0003c160:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003c170:· | 0003c170:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003c180:· | 0003c180:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003c190:· | 0003c190:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c1a0:· | 0003c1a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003c1b0:· | 0003c1b0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003c1c0:· | 0003c1c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003c1d0:· | 0003c1d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003c1e0:· | 0003c1e0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003c1f0:· | 0003c1f0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003c200:·7 | 0003c200:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003c210:·6 | 0003c210:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003c220:·6 | 0003c220:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003c230:· | 0003c230:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003c240:· | 0003c240:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003c250:· | 0003c250:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003c260:· | 0003c260:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003c270:· | 0003c270:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003c280:· | 0003c280:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c290:· | 0003c290:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003c2a0:· | 0003c2a0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003c2b0:· | 0003c2b0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c2c0:· | 0003c2c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c2d0:· | 0003c2d0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003c2e0:· | 0003c2e0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003c2f0:· | 0003c2f0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003c300:· | 0003c300:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003c310:· | 0003c310:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003c320:· | 0003c320:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003c330:· | 0003c330:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003c340:· | 0003c340:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003c350:·7 | 0003c350:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003c360:·6 | 0003c360:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003c370:· | 0003c370:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003c380:· | 0003c380:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003c390:· | 0003c390:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003c3a0:· | 0003c3a0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| Max diff block lines reached; 17799262/17854214 bytes (99.69%) of diff not shown. | |||
| Offset 15233, 282 lines modified | Offset 15233, 282 lines modified | ||
| 0003b800:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | 0003b800:·6765·743d·2223·6964·6d38·3438·3022·2074··get="#idm8480"·t | ||
| 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b810:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b820:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b830:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b840:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b850:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b860:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b870:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b880:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b890:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b8a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b8b0:·2069·643d·2269·646d·3834·3830·223e·3c74···id="idm8480"><t | |||
| 0003b8c0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b8d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b8e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b8f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b900:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b910:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b870:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b880:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b890:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8c0:·646d·3834·3830·223e·3c70·7265·3e3c·636f··dm8480"><pre><co | |||
| 0003b8d0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b8e0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b8f0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b900:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b910:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b920:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b930:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b940:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b950:·6964·6d38·3438·3122·2074·6162·696e·6465··idm8481"·tabinde | |||
| 0003b960:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b970:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b980:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b990:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b9a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b9b0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b9c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d38·3438·3122·3e3c·7461·626c·6520·636c··m8481"><table·cl | |||
| 0003ba10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003ba60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b950:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003ba70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003ba80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b97 | 0003ba90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003baa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bab0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bac0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bad0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bae0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003baf0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003bb00:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003bb10:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003bb20:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003bb30:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003bb40:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003bb50:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b980:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b990:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b9a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b9b0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b9c0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b9d0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b9e0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b9f0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003ba00:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ba10:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003ba20:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003ba30:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003ba40:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003ba50:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003ba60:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003ba70:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003ba80:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003ba90:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003baa0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bab0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bac0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bad0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bae0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003baf0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003bb00:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bb10:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bb20:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bb30:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003bb40:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003bb50:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003bb60:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003bb70:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003bb80:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003bb90:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003bba0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003bbb0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bbc0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bbd0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbe0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bbf0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bc00:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bc10:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bc20:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bc30:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bc40:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bc50:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b | 0003bb60:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | ||
| 0003b | 0003bb70:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b | 0003bb80:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003bb90:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003bba0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003bbb0:·6574·3d22·2369·646d·3834·3832·2220·7461··et="#idm8482"·ta | ||
| 0003b | 0003bbc0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003bbd0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003bbe0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003bbf0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003bc00:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003bc10:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b | 0003bc20:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b | 0003bc30:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| Max diff block lines reached; 32559300/32596864 bytes (99.88%) of diff not shown. | |||
| Offset 15251, 282 lines modified | Offset 15251, 282 lines modified | ||
| 0003b920:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b920:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b930:·646d·3834·3830·2220·7461·6269·6e64·6578··dm8480"·tabindex | 0003b930:·646d·3834·3830·2220·7461·6269·6e64·6578··dm8480"·tabindex | ||
| 0003b940:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b940:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b950:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b950:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b960:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b960:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b970:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b970:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b980:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b980:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b990:·6d65·6469·6174·696f·6e20·4 | 0003b990:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b9a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b9b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b9e0:·6d38·3438·3022·3e3c·7461·626c·6520·636c··m8480"><table·cl | |||
| 0003b9f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ba30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ba40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b9a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b9b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b9c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b9e0:·7365·2220·6964·3d22·6964·6d38·3438·3022··se"·id="idm8480" | |||
| 0003b9f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003ba00:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003ba10:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003ba20:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ba30:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ba40:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ba50:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ba60:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ba70:·7461·7267·6574·3d22·2369·646d·3834·3831··target="#idm8481 | |||
| 0003ba80:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ba90:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003baa0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bab0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bac0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bad0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bae0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003baf0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bb00:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bb10:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bb20:·6522·2069·643d·2269·646d·3834·3831·223e··e"·id="idm8481"> | |||
| 0003bb30:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bb40:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bb50:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bb60:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bb70:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003bb80:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003bb90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ba80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ba90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003bba0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bbb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bbc0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003bbd0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003bbe0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003bbf0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003bc00:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003bc10:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bc20:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003bc30:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003bc40:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003bc50:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003bc60:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003bc70:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003bc80:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003bac0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bad0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003bae0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003baf0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003bb00:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003bb10:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003bb20:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003bb30:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bb40:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bb50:·3039·2d36·3531·3031·300a·2020·2d20·4e49··09-651010.··-·NI | |||
| 0003bb60:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bb70:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003bb80:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003bb90:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003bba0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003bbb0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003bbc0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003bbd0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003bbe0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003bbf0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003bc00:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003bc10:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003bc20:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003bc30:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003bc40:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003bc50:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003bc60:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003bc70:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003bc80:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003bc90:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003bca0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bcb0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bcc0:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003bcd0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bce0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bcf0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bd00:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bd10:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bd20:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bd30:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bd40:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bd50:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bd60:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bd70:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bd80:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b | 0003bc90:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b | 0003bca0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b | 0003bcb0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b | 0003bcc0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b | 0003bcd0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b | 0003bce0:·6d38·3438·3222·2074·6162·696e·6465·783d··m8482"·tabindex= | ||
| 0003b | 0003bcf0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b | 0003bd00:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b | 0003bd10:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b | 0003bd20:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b | 0003bd30:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b | 0003bd40:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b | 0003bd50:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b | 0003bd60:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| Max diff block lines reached; 32472270/32509834 bytes (99.88%) of diff not shown. | |||
| Offset 15023, 195 lines modified | Offset 15023, 195 lines modified | ||
| 0003aae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003aae0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003aaf0:·3d22·2369·646d·3235·3130·2220·7461·6269··="#idm2510"·tabi | 0003aaf0:·3d22·2369·646d·3235·3130·2220·7461·6269··="#idm2510"·tabi | ||
| 0003ab00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ab00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ab10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ab10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ab20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ab20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ab30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ab30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ab40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ab40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ab50:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ab50:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003ab60:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ab70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ab80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ab90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aba0:·646d·3235·3130·223e·3c70·7265·3e3c·636f··dm2510"><pre><co | |||
| 0003abb0:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | |||
| 0003abc0:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | |||
| 0003abd0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | |||
| 0003abe0:·6c61·7466·6f72·6d73·0a69·6620·7270·6d20··latforms.if·rpm· | |||
| 0003abf0:·2d2d·7175·6965·7420·2d71·2062·696e·643b··--quiet·-q·bind; | |||
| 0003ac00:·2074·6865·6e0a·0a66·756e·6374·696f·6e20···then..function· | |||
| 0003ac10:·7265·6d65·6469·6174·655f·6269·6e64·5f63··remediate_bind_c | |||
| 0003ac20:·7279·7074·6f5f·706f·6c69·6379·2829·207b··rypto_policy()·{ | |||
| 0003ac30:·0a09·434f·4e46·4947·5f46·494c·453d·222f··..CONFIG_FILE="/ | |||
| 0003ac40:·6574·632f·6e61·6d65·642e·636f·6e66·220a··etc/named.conf". | |||
| 0003ac50:·0969·6620·7465·7374·202d·6620·2224·434f··.if·test·-f·"$CO | |||
| 0003ac60:·4e46·4947·5f46·494c·4522·3b20·7468·656e··NFIG_FILE";·then | |||
| 0003ac70:·0a09·0973·6564·202d·6920·2773·7c6f·7074··...sed·-i·'s|opt | |||
| 0003ac80:·696f·6e73·207b·7c26·616d·703b·5c6e·5c74··ions·{|&\n\t | |||
| 0003ac90:·696e·636c·7564·6520·222f·6574·632f·6372··include·"/etc/cr | |||
| 0003aca0:·7970·746f·2d70·6f6c·6963·6965·732f·6261··ypto-policies/ba | |||
| 0003acb0:·636b·2d65·6e64·732f·6269·6e64·2e63·6f6e··ck-ends/bind.con | |||
| 0003acc0:·6669·6722·3b7c·2720·2224·434f·4e46·4947··fig";|'·"$CONFIG | |||
| 0003acd0:·5f46·494c·4522·0a09·0972·6574·7572·6e20··_FILE"...return· | |||
| 0003ace0:·300a·0965·6c73·650a·0909·6563·686f·2022··0..else...echo·" | |||
| 0003ab60:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ab70:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ab80:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ab90:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aba0:·3d22·6964·6d32·3531·3022·3e3c·7461·626c··="idm2510"><tabl | |||
| 0003abb0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003abc0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003abd0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003abe0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003abf0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ac00:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ac10:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ac20:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ac30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ac40:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ac50:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ac60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ac70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ac80:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| 0003ac90:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aca0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003acb0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003acc0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003acd0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003ace0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003acf0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003ad00:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003ad10:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003ad20:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003ad30:·2d35·332d·5343·2d31·330a·2020·2d20·636f··-53-SC-13.··-·co | |||
| 0003ad40:·6e66·6967·7572·655f·6269·6e64·5f63·7279··nfigure_bind_cry | |||
| 0003ad50:·7074·6f5f·706f·6c69·6379·0a20·202d·2063··pto_policy.··-·c | |||
| 0003ad60:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | |||
| 0003ad70:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | |||
| 0003ad80:·6974·790a·2020·2d20·6c6f·775f·636f·6d70··ity.··-·low_comp | |||
| 0003ad90:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003ada0:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | |||
| 0003adb0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003adc0:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003add0:·6520·4249·4e44·2074·6f20·7573·6520·5379··e·BIND·to·use·Sy | |||
| 0003ade0:·7374·656d·2043·7279·7074·6f20·506f·6c69··stem·Crypto·Poli | |||
| 0003adf0:·6379·202d·2043·6865·636b·2042·494e·4420··cy·-·Check·BIND· | |||
| 0003ae00:·636f·6e66·6967·7572·6174·696f·6e20·6669··configuration·fi | |||
| 0003ae10:·6c65·0a20·2020·2065·7869·7374·730a·2020··le.····exists.·· | |||
| 0003ae20:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | |||
| 0003ae30:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | |||
| 0003ae40:·2f65·7463·2f6e·616d·6564·2e63·6f6e·660a··/etc/named.conf. | |||
| 0003ae50:·2020·7265·6769·7374·6572·3a20·6269·6e64····register:·bind | |||
| 0003ae60:·5f63·6f6e·6669·675f·6669·6c65·0a20·2077··_config_file.··w | |||
| 0003ae70:·6865·6e3a·2027·2262·696e·6422·2069·6e20··hen:·'"bind"·in· | |||
| 0003ae80:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003ae90:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003aea0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003aeb0:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003aec0:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003aed0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003aee0:·332d·5343·2d31·330a·2020·2d20·636f·6e66··3-SC-13.··-·conf | |||
| 0003aef0:·6967·7572·655f·6269·6e64·5f63·7279·7074··igure_bind_crypt | |||
| 0003af00:·6f5f·706f·6c69·6379·0a20·202d·2063·6f6e··o_policy.··-·con | |||
| 0003af10:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | |||
| 0003af20:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | |||
| 0003af30:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003af40:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003af50:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | |||
| 0003af60:·6562·6f6f·745f·6e65·6564·6564·0a0a·2d20··eboot_needed..-· | |||
| 0003af70:·6e61·6d65·3a20·436f·6e66·6967·7572·6520··name:·Configure· | |||
| 0003af80:·4249·4e44·2074·6f20·7573·6520·5379·7374··BIND·to·use·Syst | |||
| 0003af90:·656d·2043·7279·7074·6f20·506f·6c69·6379··em·Crypto·Policy | |||
| 0003afa0:·202d·2041·626f·7274·696e·6720·7265·6d65···-·Aborting·reme | |||
| 0003afb0:·6469·6174·696f·6e2c·2066·696c·6520·6e6f··diation,·file·no | |||
| 0003afc0:·740a·2020·2020·666f·756e·640a·2020·616e··t.····found.··an | |||
| 0003afd0:·7369·626c·652e·6275·696c·7469·6e2e·6465··sible.builtin.de | |||
| 0003afe0:·6275·673a·0a20·2020·206d·7367·3a20·4162··bug:.····msg:·Ab | |||
| 0003a | 0003acf0:·4162·6f72·7469·6e67·2072·656d·6564·6961··Aborting·remedia | ||
| 0003b000:·6f6e·2061·7320·272f·6574·632f·6e61·6d65··on·as·'/etc/name | |||
| 0003b010:·642e·636f·6e66·2720·7761·7320·6e6f·7420··d.conf'·was·not· | |||
| 0003b020:·666f·756e·642e·0a20·2077·6865·6e3a·0a20··found..··when:.· | |||
| 0003b030:·202d·2027·2262·696e·6422·2069·6e20·616e···-·'"bind"·in·an | |||
| 0003b040:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b050:·6167·6573·270a·2020·2d20·6e6f·7420·6269··ages'.··-·not·bi | |||
| 0003b060:·6e64·5f63·6f6e·6669·675f·6669·6c65·2e73··nd_config_file.s | |||
| 0003b070:·7461·742e·6578·6973·7473·0a20·2074·6167··tat.exists.··tag | |||
| 0003b080:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 0003b090:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b0a0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b0b0:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b0c0:·302d·3533·2d53·432d·3133·0a20·202d·2063··0-53-SC-13.··-·c | |||
| 0003b0d0:·6f6e·6669·6775·7265·5f62·696e·645f·6372··onfigure_bind_cr | |||
| 0003b0e0:·7970·746f·5f70·6f6c·6963·790a·2020·2d20··ypto_policy.··-· | |||
| 0003b0f0:·636f·6e66·6967·7572·655f·7374·7261·7465··configure_strate | |||
| 0003b100:·6779·0a20·202d·2068·6967·685f·7365·7665··gy.··-·high_seve | |||
| 0003b110:·7269·7479·0a20·202d·206c·6f77·5f63·6f6d··rity.··-·low_com | |||
| 0003b120:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b130:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | |||
| Max diff block lines reached; 18704570/18730128 bytes (99.86%) of diff not shown. | |||
| Offset 15236, 408 lines modified | Offset 15236, 408 lines modified | ||
| 0003b830:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | 0003b830:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | ||
| 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b840:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b850:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b860:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b870:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b880:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b890:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b8a0:· | 0003b8a0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b8b0:· | 0003b8b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b8c0:· | 0003b8c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b8d0:· | 0003b8d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b8e0:· | 0003b8e0:·2269·646d·3138·3836·223e·3c70·7265·3e3c··"idm1886"><pre>< | ||
| 0003b8f0:·6 | 0003b8f0:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b900:· | 0003b900:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003b910:· | 0003b910:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003b920:· | 0003b920:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003b930:· | 0003b930:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003b940:· | 0003b940:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003b950:· | 0003b950:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b960:· | 0003b960:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003b970:· | 0003b970:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003b980:·3 | 0003b980:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b990:· | 0003b990:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003b9a0:· | 0003b9a0:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003b9b0:· | 0003b9b0:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003b9c0:·6 | 0003b9c0:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003b9d0:· | 0003b9d0:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003b9e0:· | 0003b9e0:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003b9f0:·6 | 0003b9f0:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003ba00:·6 | 0003ba00:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003ba10:·6 | 0003ba10:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003ba20:· | 0003ba20:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003ba30:· | 0003ba30:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003ba40:· | 0003ba40:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003ba50:· | 0003ba50:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003ba60:· | 0003ba60:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003ba70:· | 0003ba70:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003ba80:· | 0003ba80:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003ba90:· | 0003ba90:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003baa0:· | 0003baa0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003bab0:· | 0003bab0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003bac0:· | 0003bac0:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003bad0:· | 0003bad0:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003bae0:· | 0003bae0:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003baf0:· | 0003baf0:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003bb00:·2 | 0003bb00:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003bb10:· | 0003bb10:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003bb20:· | 0003bb20:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003bb30:·2 | 0003bb30:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003bb40:· | 0003bb40:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003bb50:·6 | 0003bb50:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003bb60:·6 | 0003bb60:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003bb70:· | 0003bb70:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003bb80:· | 0003bb80:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003bb90:· | 0003bb90:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003bba0:· | 0003bba0:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | ||
| 0003bbb0:·6 | 0003bbb0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003bbc0:·6 | 0003bbc0:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003bbd0:· | 0003bbd0:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003bbe0:· | 0003bbe0:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003bbf0:· | 0003bbf0:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003bc00:·7 | 0003bc00:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003bc10:· | 0003bc10:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003bc20:· | 0003bc20:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003bc30:· | 0003bc30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003bc40:·6 | 0003bc40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003bc50:· | 0003bc50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003bc60:·6 | 0003bc60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003bc70:·6 | 0003bc70:·6765·743d·2223·6964·6d31·3838·3722·2074··get="#idm1887"·t | ||
| 0003bc80:· | 0003bc80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bc90:· | 0003bc90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bca0:·7 | 0003bca0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bcb0:· | 0003bcb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bcc0:·7 | 0003bcc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003bcd0:· | 0003bcd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bce0:· | 0003bce0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003bcf0:· | 0003bcf0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bd00:·206 | 0003bd00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bd10:· | 0003bd10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bd20:· | 0003bd20:·2069·643d·2269·646d·3138·3837·223e·3c74···id="idm1887"><t | ||
| 0003bd30:· | 0003bd30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003bd40:· | 0003bd40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003bd50:· | 0003bd50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003bd60:· | 0003bd60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003bd70:·3 | 0003bd70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bd80:· | 0003bd80:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003bd90:· | 0003bd90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bda0:· | 0003bda0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bdb0:· | 0003bdb0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003bdc0:· | 0003bdc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bdd0:· | 0003bdd0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bde0:· | 0003bde0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bdf0:· | 0003bdf0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003be00:· | 0003be00:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003be10:·2 | 0003be10:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003be20:· | 0003be20:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003be30:· | 0003be30:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003be40:·6 | 0003be40:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003be50:· | 0003be50:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003be60:· | 0003be60:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003be70:·202 | 0003be70:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003be80:· | 0003be80:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003be90:·5 | 0003be90:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003bea0:· | 0003bea0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003beb0:· | 0003beb0:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003bec0:· | 0003bec0:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003bed0:· | 0003bed0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bee0:· | 0003bee0:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003bef0:·2 | 0003bef0:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003bf00:· | 0003bf00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bf10:· | 0003bf10:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003bf20:· | 0003bf20:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003bf30:·20 | 0003bf30:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bf40:· | 0003bf40:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003bf50:· | 0003bf50:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003bf60:· | 0003bf60:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003bf70:· | 0003bf70:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003bf80:· | 0003bf80:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003bf90:· | 0003bf90:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003bfa0:·6 | 0003bfa0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003bfb0:· | 0003bfb0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003bfc0:·202 | 0003bfc0:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003bfd0:·6 | 0003bfd0:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003bfe0:· | 0003bfe0:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003bff0:· | 0003bff0:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003c000:·5 | 0003c000:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 26869348/26924300 bytes (99.80%) of diff not shown. | |||
| Offset 15177, 408 lines modified | Offset 15177, 408 lines modified | ||
| 0003b480:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | 0003b480:·6574·3d22·2369·646d·3138·3836·2220·7461··et="#idm1886"·ta | ||
| 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b490:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b4a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b4b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b4c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b4d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b4e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b4f0:· | 0003b4f0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b500:· | 0003b500:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b510:· | 0003b510:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b520:· | 0003b520:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b530:· | 0003b530:·2269·646d·3138·3836·223e·3c70·7265·3e3c··"idm1886"><pre>< | ||
| 0003b540:·6 | 0003b540:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b550:· | 0003b550:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003b560:· | 0003b560:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003b570:· | 0003b570:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003b580:· | 0003b580:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003b590:· | 0003b590:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003b5a0:· | 0003b5a0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b5b0:· | 0003b5b0:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003b5c0:· | 0003b5c0:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003b5d0:·3 | 0003b5d0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b5e0:· | 0003b5e0:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003b5f0:· | 0003b5f0:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003b600:· | 0003b600:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003b610:·6 | 0003b610:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003b620:· | 0003b620:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003b630:· | 0003b630:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003b640:·6 | 0003b640:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003b650:·6 | 0003b650:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003b660:·6 | 0003b660:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003b670:· | 0003b670:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003b680:· | 0003b680:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003b690:· | 0003b690:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003b6a0:· | 0003b6a0:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003b6b0:· | 0003b6b0:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003b6c0:· | 0003b6c0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003b6d0:· | 0003b6d0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003b6e0:· | 0003b6e0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003b6f0:· | 0003b6f0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003b700:· | 0003b700:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003b710:· | 0003b710:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003b720:· | 0003b720:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003b730:· | 0003b730:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003b740:· | 0003b740:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003b750:·2 | 0003b750:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003b760:· | 0003b760:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003b770:· | 0003b770:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003b780:·2 | 0003b780:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003b790:· | 0003b790:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003b7a0:·6 | 0003b7a0:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b7b0:·6 | 0003b7b0:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003b7c0:· | 0003b7c0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b7d0:· | 0003b7d0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003b7e0:· | 0003b7e0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003b7f0:· | 0003b7f0:·2020·2020·646e·6620·7265·696e·7374·616c······dnf·reinstal | ||
| 0003b800:·6 | 0003b800:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003b810:·6 | 0003b810:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003b820:· | 0003b820:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003b830:· | 0003b830:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003b840:· | 0003b840:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003b850:·7 | 0003b850:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003b860:· | 0003b860:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003b870:· | 0003b870:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003b880:· | 0003b880:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b890:·6 | 0003b890:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b8a0:· | 0003b8a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b8b0:·6 | 0003b8b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b8c0:·6 | 0003b8c0:·6765·743d·2223·6964·6d31·3838·3722·2074··get="#idm1887"·t | ||
| 0003b8d0:· | 0003b8d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b8e0:· | 0003b8e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b8f0:·7 | 0003b8f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b900:· | 0003b900:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b910:·7 | 0003b910:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b920:· | 0003b920:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b930:· | 0003b930:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003b940:· | 0003b940:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b950:·206 | 0003b950:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b960:· | 0003b960:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b970:· | 0003b970:·2069·643d·2269·646d·3138·3837·223e·3c74···id="idm1887"><t | ||
| 0003b980:· | 0003b980:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003b990:· | 0003b990:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003b9a0:· | 0003b9a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003b9b0:· | 0003b9b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003b9c0:·3 | 0003b9c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003b9d0:· | 0003b9d0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003b9e0:· | 0003b9e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b9f0:· | 0003b9f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003ba00:· | 0003ba00:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003ba10:· | 0003ba10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003ba20:· | 0003ba20:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003ba30:· | 0003ba30:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003ba50:· | 0003ba50:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003ba60:·2 | 0003ba60:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003ba70:· | 0003ba70:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003ba80:· | 0003ba80:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003ba90:·6 | 0003ba90:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003baa0:· | 0003baa0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003bab0:· | 0003bab0:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003bac0:·202 | 0003bac0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003bad0:· | 0003bad0:·2d35·2e31·302e·342e·310a·2020·2d20·4e49··-5.10.4.1.··-·NI | ||
| 0003bae0:·5 | 0003bae0:·5354·2d38·3030·2d31·3731·2d33·2e33·2e38··ST-800-171-3.3.8 | ||
| 0003baf0:· | 0003baf0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bb00:· | 0003bb00:·312d·332e·342e·310a·2020·2d20·4e49·5354··1-3.4.1.··-·NIST | ||
| 0003bb10:· | 0003bb10:·2d38·3030·2d35·332d·4155·2d39·2833·290a··-800-53-AU-9(3). | ||
| 0003bb20:· | 0003bb20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bb30:· | 0003bb30:·434d·2d36·2863·290a·2020·2d20·4e49·5354··CM-6(c).··-·NIST | ||
| 0003bb40:·2 | 0003bb40:·2d38·3030·2d35·332d·434d·2d36·2864·290a··-800-53-CM-6(d). | ||
| 0003bb50:· | 0003bb50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bb60:· | 0003bb60:·5349·2d37·0a20·202d·204e·4953·542d·3830··SI-7.··-·NIST-80 | ||
| 0003bb70:· | 0003bb70:·302d·3533·2d53·492d·3728·3129·0a20·202d··0-53-SI-7(1).··- | ||
| 0003bb80:·20 | 0003bb80:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bb90:· | 0003bb90:·3728·3629·0a20·202d·2050·4349·2d44·5353··7(6).··-·PCI-DSS | ||
| 0003bba0:· | 0003bba0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | ||
| 0003bbb0:· | 0003bbb0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | ||
| 0003bbc0:· | 0003bbc0:·202d·2068·6967·685f·636f·6d70·6c65·7869···-·high_complexi | ||
| 0003bbd0:· | 0003bbd0:·7479·0a20·202d·2068·6967·685f·7365·7665··ty.··-·high_seve | ||
| 0003bbe0:· | 0003bbe0:·7269·7479·0a20·202d·206d·6564·6975·6d5f··rity.··-·medium_ | ||
| 0003bbf0:·6 | 0003bbf0:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 0003bc00:· | 0003bc00:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | ||
| 0003bc10:·202 | 0003bc10:·2020·2d20·7265·7374·7269·6374·5f73·7472····-·restrict_str | ||
| 0003bc20:·6 | 0003bc20:·6174·6567·790a·2020·2d20·7270·6d5f·7665··ategy.··-·rpm_ve | ||
| 0003bc30:· | 0003bc30:·7269·6679·5f68·6173·6865·730a·0a2d·206e··rify_hashes..-·n | ||
| 0003bc40:· | 0003bc40:·616d·653a·2027·5365·7420·6661·6374·3a20··ame:·'Set·fact:· | ||
| 0003bc50:·5 | 0003bc50:·5061·636b·6167·6520·6d61·6e61·6765·7220··Package·manager· | ||
| Max diff block lines reached; 14185682/14240634 bytes (99.61%) of diff not shown. | |||
| Offset 100, 14 lines modified | Offset 100, 33 lines modified | ||
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 102 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 103 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 108 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 110 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 111 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 112 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 113 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 114 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 115 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 112 | -·name:·Gather·the·package·facts | 125 | -·name:·Gather·the·package·facts |
| 113 | ··package_facts: | 126 | ··package_facts: |
| Offset 274, 33 lines modified | Offset 293, 14 lines modified | ||
| 274 | ··-·PCI-DSSv4-11.5.2 | 293 | ··-·PCI-DSSv4-11.5.2 |
| 275 | ··-·high_complexity | 294 | ··-·high_complexity |
| 276 | ··-·high_severity | 295 | ··-·high_severity |
| 277 | ··-·medium_disruption | 296 | ··-·medium_disruption |
| 278 | ··-·no_reboot_needed | 297 | ··-·no_reboot_needed |
| 279 | ··-·restrict_strategy | 298 | ··-·restrict_strategy |
| 280 | ··-·rpm_verify_hashes | 299 | ··-·rpm_verify_hashes |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 283 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 284 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 285 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 286 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 287 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 288 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 289 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 290 | fi | ||
| 291 | else | ||
| 292 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 293 | fi | ||
| 294 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 295 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 301 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 296 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 302 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 297 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 303 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 298 | $·rpm·-qf·FILENAME | 304 | $·rpm·-qf·FILENAME |
| 299 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 305 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 321, 14 lines modified | Offset 321, 50 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 334 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 335 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 336 | declare·-A·SETPERMS_RPM_DICT | ||
| 337 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 338 | #·is·expected·by·the·RPM·database | ||
| 339 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 340 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 341 | do | ||
| 342 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 343 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 344 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 345 | ········do | ||
| 346 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 347 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 348 | ········done | ||
| 349 | done | ||
| 350 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 351 | #·correct·values | ||
| 352 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 353 | do | ||
| 354 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 355 | done | ||
| 356 | else | ||
| 357 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 358 | fi | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Gather·the·package·facts | 364 | -·name:·Gather·the·package·facts |
| 334 | ··package_facts: | 365 | ··package_facts: |
| Offset 440, 50 lines modified | Offset 476, 14 lines modified | ||
| 440 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 441 | ··-·high_complexity | 477 | ··-·high_complexity |
| 442 | ··-·high_severity | 478 | ··-·high_severity |
| 443 | ··-·medium_disruption | 479 | ··-·medium_disruption |
| 444 | ··-·no_reboot_needed | 480 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 481 | ··-·restrict_strategy |
| 446 | ··-·rpm_verify_permissions | 482 | ··-·rpm_verify_permissions |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1107223/1115304 bytes (99.28%) of diff not shown. | |||
| Offset 15168, 408 lines modified | Offset 15168, 408 lines modified | ||
| 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b3f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b400:·2223·6964·6d31·3838·3622·2074·6162·696e··"#idm1886"·tabin | 0003b400:·2223·6964·6d31·3838·3622·2074·6162·696e··"#idm1886"·tabin | ||
| 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b410:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b420:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b430:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b440:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b450:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b460:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b460:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b470:·6 | 0003b470:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b480:·3 | 0003b480:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b490:· | 0003b490:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b4a0:· | 0003b4a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b4b0:· | 0003b4b0:·6d31·3838·3622·3e3c·7072·653e·3c63·6f64··m1886"><pre><cod | ||
| 0003b4c0:· | 0003b4c0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b4d0:·6 | 0003b4d0:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b4e0:·6 | 0003b4e0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b4f0:· | 0003b4f0:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b500:· | 0003b500:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b510:· | 0003b510:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b520:· | 0003b520:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b530:·7 | 0003b530:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b540:· | 0003b540:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b550:· | 0003b550:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b560:· | 0003b560:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b570:· | 0003b570:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b580:· | 0003b580:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b590:· | 0003b590:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b5a0:· | 0003b5a0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b5b0:·6 | 0003b5b0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b5c0:· | 0003b5c0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b5d0:· | 0003b5d0:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b5e0:·6 | 0003b5e0:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b5f0:· | 0003b5f0:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b600:·6 | 0003b600:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b610:· | 0003b610:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b620:· | 0003b620:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b630:· | 0003b630:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b640:· | 0003b640:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b650:·2 | 0003b650:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b660:· | 0003b660:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b670:· | 0003b670:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b680:·2 | 0003b680:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b690:· | 0003b690:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b6a0:· | 0003b6a0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b6b0:· | 0003b6b0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b6c0:· | 0003b6c0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b6d0:· | 0003b6d0:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b6e0:·2 | 0003b6e0:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b6f0:· | 0003b6f0:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b700:·6 | 0003b700:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b710:· | 0003b710:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b720:· | 0003b720:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b730:· | 0003b730:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b740:·6 | 0003b740:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b750:·7 | 0003b750:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b760:· | 0003b760:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b770:· | 0003b770:·2064·6e66·2072·6569·6e73·7461·6c6c·202d···dnf·reinstall·- | ||
| 0003b780:· | 0003b780:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b790:·6 | 0003b790:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b7a0:· | 0003b7a0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b7b0:· | 0003b7b0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b7c0:·6 | 0003b7c0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b7d0:· | 0003b7d0:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b7e0:·6 | 0003b7e0:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b7f0:· | 0003b7f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b800:· | 0003b800:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b810:· | 0003b810:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b820:· | 0003b820:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b830:·7 | 0003b830:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b840:· | 0003b840:·3d22·2369·646d·3138·3837·2220·7461·6269··="#idm1887"·tabi | ||
| 0003b850:· | 0003b850:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b860:· | 0003b860:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b870:· | 0003b870:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b880:· | 0003b880:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b890:· | 0003b890:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b8a0:· | 0003b8a0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b8b0:· | 0003b8b0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b8c0:· | 0003b8c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b8d0:· | 0003b8d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b8e0:· | 0003b8e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b8f0:· | 0003b8f0:·3d22·6964·6d31·3838·3722·3e3c·7461·626c··="idm1887"><tabl | ||
| 0003b900:· | 0003b900:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b910:· | 0003b910:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b920:· | 0003b920:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b930:· | 0003b930:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b940:·3 | 0003b940:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b950:· | 0003b950:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b960:· | 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b970:· | 0003b970:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b980:· | 0003b980:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b990:· | 0003b990:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b9a0:· | 0003b9a0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b9b0:·3 | 0003b9b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b9c0:· | 0003b9c0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b9d0:· | 0003b9d0:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b9e0:· | 0003b9e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b9f0:· | 0003b9f0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003ba00:·20 | 0003ba00:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003ba10:·6 | 0003ba10:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003ba20:·65 | 0003ba20:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003ba30:· | 0003ba30:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003ba40:·6 | 0003ba40:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003ba50:· | 0003ba50:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003ba60:· | 0003ba60:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003ba70:· | 0003ba70:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003ba80:· | 0003ba80:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003ba90:· | 0003ba90:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003baa0:·20 | 0003baa0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bab0:· | 0003bab0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bac0:· | 0003bac0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bad0:· | 0003bad0:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bae0:· | 0003bae0:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003baf0:· | 0003baf0:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bb00:· | 0003bb00:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bb10:· | 0003bb10:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bb20:· | 0003bb20:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bb30:· | 0003bb30:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bb40:· | 0003bb40:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bb50:· | 0003bb50:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003bb60:· | 0003bb60:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003bb70:· | 0003bb70:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003bb80:·6 | 0003bb80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003bb90:· | 0003bb90:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003bba0:· | 0003bba0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003bbb0:·7 | 0003bbb0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003bbc0:· | 0003bbc0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 7315610/7370562 bytes (99.25%) of diff not shown. | |||
| Offset 99, 14 lines modified | Offset 99, 33 lines modified | ||
| 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 99 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 100 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 101 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 102 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 104 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 108 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 109 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 110 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 111 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 112 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 113 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 114 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 115 | fi | ||
| 116 | else | ||
| 117 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 118 | fi | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 111 | -·name:·Gather·the·package·facts | 124 | -·name:·Gather·the·package·facts |
| 112 | ··package_facts: | 125 | ··package_facts: |
| Offset 273, 33 lines modified | Offset 292, 14 lines modified | ||
| 273 | ··-·PCI-DSSv4-11.5.2 | 292 | ··-·PCI-DSSv4-11.5.2 |
| 274 | ··-·high_complexity | 293 | ··-·high_complexity |
| 275 | ··-·high_severity | 294 | ··-·high_severity |
| 276 | ··-·medium_disruption | 295 | ··-·medium_disruption |
| 277 | ··-·no_reboot_needed | 296 | ··-·no_reboot_needed |
| 278 | ··-·restrict_strategy | 297 | ··-·restrict_strategy |
| 279 | ··-·rpm_verify_hashes | 298 | ··-·rpm_verify_hashes |
| 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 281 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 282 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 283 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 284 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 285 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 286 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 287 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 288 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 289 | fi | ||
| 290 | else | ||
| 291 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 292 | fi | ||
| 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 299 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 300 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 301 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 302 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 297 | $·rpm·-qf·FILENAME | 303 | $·rpm·-qf·FILENAME |
| 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 304 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 320, 14 lines modified | Offset 320, 50 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 332 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 333 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 334 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 335 | declare·-A·SETPERMS_RPM_DICT | ||
| 336 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 337 | #·is·expected·by·the·RPM·database | ||
| 338 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 339 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 340 | do | ||
| 341 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 342 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 343 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 344 | ········do | ||
| 345 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 346 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 347 | ········done | ||
| 348 | done | ||
| 349 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 350 | #·correct·values | ||
| 351 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 352 | do | ||
| 353 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 354 | done | ||
| 355 | else | ||
| 356 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 357 | fi | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 332 | -·name:·Gather·the·package·facts | 363 | -·name:·Gather·the·package·facts |
| 333 | ··package_facts: | 364 | ··package_facts: |
| Offset 439, 50 lines modified | Offset 475, 14 lines modified | ||
| 439 | ··-·PCI-DSSv4-11.5.2 | 475 | ··-·PCI-DSSv4-11.5.2 |
| 440 | ··-·high_complexity | 476 | ··-·high_complexity |
| 441 | ··-·high_severity | 477 | ··-·high_severity |
| 442 | ··-·medium_disruption | 478 | ··-·medium_disruption |
| 443 | ··-·no_reboot_needed | 479 | ··-·no_reboot_needed |
| 444 | ··-·restrict_strategy | 480 | ··-·restrict_strategy |
| 445 | ··-·rpm_verify_permissions | 481 | ··-·rpm_verify_permissions |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 695136/703214 bytes (98.85%) of diff not shown. | |||
| Offset 15063, 133 lines modified | Offset 15063, 133 lines modified | ||
| 0003ad60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ad60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ad70:·743d·2223·6964·6d37·3330·2220·7461·6269··t="#idm730"·tabi | 0003ad70:·743d·2223·6964·6d37·3330·2220·7461·6269··t="#idm730"·tabi | ||
| 0003ad80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ad80:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ad90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ad90:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ada0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ada0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003adb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003adb0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003adc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003adc0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003add0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003add0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ade0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003adf0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a | 0003ade0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003adf0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae00:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae10:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae20:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ae30:·3330·223e·3c70·7265·3e3c·636f·6465·3e0a··30"><pre><code>. | |||
| 0003ae40:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ae50:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ae60:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ae70:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ae80:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ae90:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ae | 0003aea0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003ae20:·3d22·6964·6d37·3330·223e·3c74·6162·6c65··="idm730"><table | |||
| 0003ae30:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ae40:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ae50:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ae60:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ae | 0003aeb0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003aec0:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | |||
| 0003aed0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003aee0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003aef0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003af00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003af10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003af20:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003af30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af60:·7073·6522·2069·643d·2269·646d·3733·3122··pse"·id="idm731" | |||
| 0003af70:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003af80:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af90:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003afa0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003afb0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003afc0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003afd0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003afe0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003a | 0003aff0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003ae90:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003aea0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003aeb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003aec0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003aed0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003 | 0003b000:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b010:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b020:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b030:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b040:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b050:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b060:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b070:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b080:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003aef0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003af00:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003af10:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003af20:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003af30:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003af40:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003af50:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003af60:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003af70:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003af80:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003af90:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afa0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003afb0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003afc0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003afd0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003afe0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003aff0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b000:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b010:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b020:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b030:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b040:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b050:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b0 | 0003b090:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | ||
| 0003b0a0:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| 0003b0b0:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0003b0c0:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0003b070:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b080:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b090:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b0a0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b0b0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b0c0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b0d0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b0e0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b0f0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b100:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b110:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b120:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b130:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b140:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b150:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b160:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b170:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b180:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b190:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b1a0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b1b0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b1c0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b1d0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b1e0:·7461·7267·6574·3d22·2369·646d·3733·3122··target="#idm731" | |||
| 0003b1f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b200:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b210:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b220:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b230:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b240:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b250:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003b260:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b270:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b280:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b290:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b2a0:·2269·646d·3733·3122·3e3c·7072·653e·3c63··"idm731"><pre><c | |||
| 0003b2b0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| Max diff block lines reached; 2163165/2180167 bytes (99.22%) of diff not shown. | |||
| Offset 116, 14 lines modified | Offset 116, 31 lines modified | ||
| 116 | ···························A.15.2.1,·A.8.2.3 | 116 | ···························A.15.2.1,·A.8.2.3 |
| 117 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 117 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 118 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 118 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | include·install_aide | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | } | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 143 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 144 | ··package_facts: |
| Offset 152, 31 lines modified | Offset 169, 14 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 169 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 170 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 171 | ··-·low_complexity |
| 155 | ··-·low_disruption | 172 | ··-·low_disruption |
| 156 | ··-·medium_severity | 173 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 174 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 175 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_aide | ||
| 169 | class·install_aide·{ | ||
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution | 177 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution |
| 176 | of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 178 | of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 177 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 179 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 178 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 180 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 179 | crontab: | 181 | crontab: |
| 180 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 182 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 650, 14 lines modified | Offset 650, 45 lines modified | ||
| 650 | Rationale:··from·retaining·access·to·the·user's·terminal·after·the·main·program·has·finished | 650 | Rationale:··from·retaining·access·to·the·user's·terminal·after·the·main·program·has·finished |
| 651 | ············executing. | 651 | ············executing. |
| 652 | Severity: ··medium | 652 | Severity: ··medium |
| 653 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty | 653 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_add_use_pty |
| 654 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 | 654 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 |
| 655 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i···R39 | 655 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i···R39 |
| 656 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 | 656 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 |
| 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 662 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 663 | if·rpm·--quiet·-q·sudo;·then | ||
| 664 | if·/usr/sbin/visudo·-qcf·/etc/sudoers;·then | ||
| 665 | ····cp·/etc/sudoers·/etc/sudoers.bak | ||
| 666 | ····if·!·grep·-P·'^[\s]*Defaults[\s]*\buse_pty\b.*$'·/etc/sudoers;·then | ||
| 667 | ········#·sudoers·file·doesn't·define·Option·use_pty | ||
| 668 | ········echo·"Defaults·use_pty"·>>·/etc/sudoers | ||
| 669 | ····fi | ||
| 670 | ····#·Check·validity·of·sudoers·and·cleanup·bak | ||
| 671 | ····if·/usr/sbin/visudo·-qcf·/etc/sudoers;·then | ||
| 672 | ········rm·-f·/etc/sudoers.bak | ||
| 673 | ····else | ||
| 674 | ········echo·"Fail·to·validate·remediated·/etc/sudoers,·reverting·to·original·file." | ||
| 675 | ········mv·/etc/sudoers.bak·/etc/sudoers | ||
| 676 | ········false | ||
| 677 | ····fi | ||
| 678 | else | ||
| 679 | ····echo·"Skipping·remediation,·/etc/sudoers·failed·to·validate" | ||
| 680 | ····false | ||
| 681 | fi | ||
| 682 | else | ||
| 683 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 684 | fi | ||
| 657 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 685 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 658 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 686 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 659 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 687 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 660 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 688 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 661 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 689 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 662 | -·name:·Gather·the·package·facts | 690 | -·name:·Gather·the·package·facts |
| 663 | ··package_facts: | 691 | ··package_facts: |
| Offset 686, 27 lines modified | Offset 717, 47 lines modified | ||
| 686 | ··-·PCI-DSSv4-2.2.6 | 717 | ··-·PCI-DSSv4-2.2.6 |
| 687 | ··-·low_complexity | 718 | ··-·low_complexity |
| 688 | ··-·low_disruption | 719 | ··-·low_disruption |
| 689 | ··-·medium_severity | 720 | ··-·medium_severity |
| 690 | ··-·no_reboot_needed | 721 | ··-·no_reboot_needed |
| 691 | ··-·restrict_strategy | 722 | ··-·restrict_strategy |
| 692 | ··-·sudo_add_use_pty | 723 | ··-·sudo_add_use_pty |
| 724 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·S\x8Su\x8ud\x8do\x8o·L\x8Lo\x8og\x8gf\x8fi\x8il\x8le\x8e·E\x8Ex\x8xi\x8is\x8st\x8ts\x8s·-\x8-·s\x8su\x8ud\x8do\x8o·l\x8lo\x8og\x8gf\x8fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 725 | A·custom·log·sudo·file·can·be·configured·with·the·'logfile'·tag.·This·rule·configures·a·sudo | ||
| 726 | custom·logfile·at·the·default·location·suggested·by·CIS,·which·uses·/var/log/sudo.log. | ||
| 727 | Rationale:··A·sudo·log·file·simplifies·auditing·of·sudo·commands. | ||
| 728 | Severity: ··low | ||
| 729 | Rule·ID:····xccdf_org.ssgproject.content_rule_sudo_custom_logfile | ||
| 730 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.2.5 | ||
| 731 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6,·2.2 | ||
| 693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 733 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 233323/238364 bytes (97.89%) of diff not shown. | |||
| Offset 15053, 217 lines modified | Offset 15053, 217 lines modified | ||
| 0003acc0:·7461·7267·6574·3d22·2369·646d·3530·3937··target="#idm5097 | 0003acc0:·7461·7267·6574·3d22·2369·646d·3530·3937··target="#idm5097 | ||
| 0003acd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003acd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ace0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ace0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003acf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003acf0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ad00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ad00:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ad10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ad10:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ad20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ad20:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ad30:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ad40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ad50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ad60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ad | 0003ad30:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003ad40:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad80:·3d22·6964·6d35·3039·3722·3e3c·7072·653e··="idm5097"><pre> | |||
| 0003ad90:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ada0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003adb0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003adc0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ad | 0003add0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003ad90:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ada0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003adb0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003adc0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003add0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ade0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ad | 0003ade0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003adf0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ae10:·3d22·2369·646d·3530·3938·2220·7461·6269··="#idm5098"·tabi | |||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003ae80:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aeb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aec0:·2269·646d·3530·3938·223e·3c74·6162·6c65··"idm5098"><table | |||
| 0003aed0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003aee0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003aef0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af00:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af10:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a | 0003af20:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003af30:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003af40:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003af50:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003af60:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003af70:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a | 0003af80:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003a | 0003af90:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003afa0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003afb0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003afc0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003afd0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003afe0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003aff0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b000:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b010:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b020:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003ae30:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003ae40:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003ae50:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ae60:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003ae70:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003ae80:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003ae90:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003aea0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003aeb0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003aec0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003aed0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003aee0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003af00:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003af10:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003af20:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003af30:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003af40:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003af50:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003af60:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003af70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003af80:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003af90:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003afa0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003afb0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003afc0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003afd0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003afe0:·6573·656e·740a·2020·7768·656e·3a20·2822··esent.··when:·(" | |||
| 0003aff0:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b000:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b010:·7320·6f72·2022·6b65·726e·656c·2d75·656b··s·or·"kernel-uek | |||
| 0003b020:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b030:·7473·2e70·6163·6b61·6765·7329·0a20·2074··ts.packages).··t | |||
| 0003b040:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b050:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b060:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b070:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b080:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b090:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b0a0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b0b0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b0c0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b0d0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b0e0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b0f0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b100:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b110:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b | 0003b030:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b | 0003b040:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b | 0003b050:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b | 0003b060:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b | 0003b070:·6172·6765·743d·2223·6964·6d35·3039·3922··arget="#idm5099" | ||
| 0003b | 0003b080:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b | 0003b090:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b | 0003b0a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b | 0003b0b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b | 0003b0c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b | 0003b0d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b0e0:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003b0f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b100:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b110:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| Max diff block lines reached; 21497016/21525610 bytes (99.87%) of diff not shown. | |||
| Offset 15058, 218 lines modified | Offset 15058, 218 lines modified | ||
| 0003ad10:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003ad10:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003ad20:·3039·3722·2074·6162·696e·6465·783d·2230··097"·tabindex="0 | 0003ad20:·3039·3722·2074·6162·696e·6465·783d·2230··097"·tabindex="0 | ||
| 0003ad30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ad30:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ad40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ad40:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ad50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ad50:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003ad60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003ad60:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003ad70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003ad70:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003ad80:·6961·7469·6f6e·204 | 0003ad80:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003ad90:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ada0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003adb0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003adc0:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003add0:·3937·223e·3c74·6162·6c65·2063·6c61·7373··97"><table·class | |||
| 0003ade0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003adf0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae00:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae10:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae20:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ae30:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a | 0003ad90:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003ada0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003adc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003add0:·2069·643d·2269·646d·3530·3937·223e·3c70···id="idm5097"><p | |||
| 0003ade0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003adf0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ae00:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ae10:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ae20:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ae30:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ae40:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ae50:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ae60:·6765·743d·2223·6964·6d35·3039·3822·2074··get="#idm5098"·t | |||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003aed0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003aee0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aef0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af00:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003af10:·6964·3d22·6964·6d35·3039·3822·3e3c·7461··id="idm5098"><ta | |||
| 0003af20:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003af30:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003af40:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003af50:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003af60:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a | 0003af70:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003a | 0003af80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ae70:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003ae80:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a | 0003af90:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003afa0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003afb0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a | 0003afc0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003afd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afe0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003aff0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b000:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b010:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b020:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b030:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b040:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b050:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b060:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b070:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003aeb0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003aec0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003aed0:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003aee0:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003aef0:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003af00:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003af10:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003af20:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003af30:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003af40:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003af50:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003af60:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003af70:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003af80:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003af90:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003afa0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003afb0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003afc0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003afd0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003afe0:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003aff0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b000:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b010:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b020:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b030:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b040:·2028·226b·6572·6e65·6c22·2069·6e20·616e···("kernel"·in·an | |||
| 0003b050:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b060:·6167·6573·206f·7220·226b·6572·6e65·6c2d··ages·or·"kernel- | |||
| 0003b070:·7565·6b22·2069·6e20·616e·7369·626c·655f··uek"·in·ansible_ | |||
| 0003b080:·6661·6374·732e·7061·636b·6167·6573·290a··facts.packages). | |||
| 0003b090:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b0a0:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003b0b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b0c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b0d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b0e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b0f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b100:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b110:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b120:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b130:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b140:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b150:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b160:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b | 0003b080:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b | 0003b090:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b | 0003b0a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b | 0003b0b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b | 0003b0c0:·612d·7461·7267·6574·3d22·2369·646d·3530··a-target="#idm50 | ||
| 0003b | 0003b0d0:·3939·2220·7461·6269·6e64·6578·3d22·3022··99"·tabindex="0" | ||
| 0003b | 0003b0e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b | 0003b0f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1 | 0003b100:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b | 0003b110:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b | 0003b120:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b220:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b230:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b240:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b250:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| Max diff block lines reached; 21773210/21801942 bytes (99.87%) of diff not shown. | |||
| Offset 15049, 217 lines modified | Offset 15049, 217 lines modified | ||
| 0003ac80:·6765·743d·2223·6964·6d35·3039·3722·2074··get="#idm5097"·t | 0003ac80:·6765·743d·2223·6964·6d35·3039·3722·2074··get="#idm5097"·t | ||
| 0003ac90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ac90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aca0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aca0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003acb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003acb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003acc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003acc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003acd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003acd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ace0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ace0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003acf0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ad00:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ad10:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ad20:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a | 0003acf0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003ad00:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ad10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad40:·646d·3530·3937·223e·3c70·7265·3e3c·636f··dm5097"><pre><co | |||
| 0003ad50:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ad60:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ad70:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ad80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ad | 0003ad90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003ad50:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ad60:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ad70:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ad80:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ad90:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ada0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ad | 0003ada0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003adb0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003adc0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003add0:·6964·6d35·3039·3822·2074·6162·696e·6465··idm5098"·tabinde | |||
| 0003ade0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003adf0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ae00:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ae10:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ae20:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003ae30:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003ae40:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003ae50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ae60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ae70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ae80:·6d35·3039·3822·3e3c·7461·626c·6520·636c··m5098"><table·cl | |||
| 0003ae90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aea0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003aeb0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003aec0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003aed0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a | 0003aee0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003add0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003a | 0003aef0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003af00:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003a | 0003af10:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003af20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003af30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003af40:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003af50:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003af60:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003af70:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003af80:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003af90:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003afa0:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003afb0:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003afc0:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003afd0:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003ae00:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ae10:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ae20:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ae30:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003ae40:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003ae50:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003ae60:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003ae70:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003ae80:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ae90:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003aea0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003aeb0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003aec0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003aed0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003aee0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003aef0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003af00:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003af10:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003af20:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003af30:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003af40:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003af50:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003af60:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003af70:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003af80:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003af90:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003afa0:·6e74·0a20·2077·6865·6e3a·2028·226b·6572··nt.··when:·("ker | |||
| 0003afb0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003afc0:·6661·6374·732e·7061·636b·6167·6573·206f··facts.packages·o | |||
| 0003afd0:·7220·226b·6572·6e65·6c2d·7565·6b22·2069··r·"kernel-uek"·i | |||
| 0003afe0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003aff0:·7061·636b·6167·6573·290a·2020·7461·6773··packages).··tags | |||
| 0003b000:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b010:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b020:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b030:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b040:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b050:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b060:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b070:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b080:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b090:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b0a0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b0b0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b0c0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003 | 0003afe0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | ||
| 0003 | 0003aff0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b0 | 0003b000:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b | 0003b010:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b | 0003b020:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b | 0003b030:·6574·3d22·2369·646d·3530·3939·2220·7461··et="#idm5099"·ta | ||
| 0003b | 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b | 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b | 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b | 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b | 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b | 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b190:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b1a0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b1b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b1c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b1d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| Max diff block lines reached; 9569288/9597882 bytes (99.70%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 53 lines modified | ||
| 115 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 115 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 116 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 116 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 117 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 117 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 119 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 119 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 144 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 145 | ····dnf·install·-y·"aide" | ||
| 146 | fi | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 161 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 162 | ··package_facts: |
| Offset 151, 53 lines modified | Offset 190, 14 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 190 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 191 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 192 | ··-·low_complexity |
| 154 | ··-·low_disruption | 193 | ··-·low_disruption |
| 155 | ··-·medium_severity | 194 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 195 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 196 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 170 | ····dnf·install·-y·"aide" | ||
| 171 | fi | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | include·install_aide | ||
| 181 | class·install_aide·{ | ||
| 182 | ··package·{·'aide': | ||
| 183 | ····ensure·=>·'installed', | ||
| 184 | ··} | ||
| 185 | } | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 201 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 202 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 198 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 221, 14 lines modified | Offset 221, 28 lines modified | ||
| 221 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 221 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 222 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 222 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 223 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 223 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 225 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 226 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 226 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 227 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 228 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 229 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 230 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 231 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 232 | ····dnf·install·-y·"aide" | ||
| 233 | fi | ||
| 234 | /usr/sbin/aide·--init | ||
| 235 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 236 | else | ||
| Max diff block lines reached; 1037747/1042800 bytes (99.52%) of diff not shown. | |||
| Offset 14735, 227 lines modified | Offset 14735, 227 lines modified | ||
| 000398e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000398e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000398f0:·646d·3831·3236·2220·7461·6269·6e64·6578··dm8126"·tabindex | 000398f0:·646d·3831·3236·2220·7461·6269·6e64·6578··dm8126"·tabindex | ||
| 00039900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00039900:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00039910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00039910:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00039920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00039920:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00039930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00039930:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00039940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00039940:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00039950:·6d65·6469·6174·696f·6e20·4 | 00039950:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00039960:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00039970:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039980:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039990:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000399a0:·7365·2220·6964·3d22·6964·6d38·3132·3622··se"·id="idm8126" | |||
| 000399b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 000399c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00039960:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00039970:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039980:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039990:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000399a0:·6d38·3132·3622·3e3c·7461·626c·6520·636c··m8126"><table·cl | |||
| 000399b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000399c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000399d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000399e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000399f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039a00:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039a10:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039a20:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039a30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039a40:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039a50:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039a60:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039a70:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039a80:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039a90:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00039aa0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 00039ab0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 00039ac0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 00039ad0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 00039ae0:·746f·0a20·2074·6167·733a·0a20·202d·2065··to.··tags:.··-·e | |||
| 00039af0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039b00:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039b10:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039b20:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039b30:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039b40:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039b50:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039b60:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039b70:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 00039 | 000399d0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | ||
| 000399e0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 000399f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00039a00:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00039a10:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00039a20:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00039a30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00039a40:·2223·6964·6d38·3132·3722·2074·6162·696e··"#idm8127"·tabin | |||
| 00039a50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039a60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039a70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039a80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039a90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039aa0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 00039b90:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 00039ba0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 00039bb0:·3a20·646e·662d·6175·746f·6d61·7469·630a··:·dnf-automatic. | |||
| 00039bc0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 00039bd0:·6e74·0a20·2077·6865·6e3a·206e·6f74·2028··nt.··when:·not·( | |||
| 00039be0:·2022·6b65·726e·656c·2220·696e·2061·6e73···"kernel"·in·ans | |||
| 00039bf0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 00039c00:·6765·7320·616e·6420·2272·706d·2d6f·7374··ges·and·"rpm-ost | |||
| 00039c10:·7265·6522·2069·6e20·616e·7369·626c·655f··ree"·in·ansible_ | |||
| 00039c20:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | |||
| 00039c30:·2020·2061·6e64·2022·626f·6f74·6322·2069·····and·"bootc"·i | |||
| 00039c40:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 00039c50:·7061·636b·6167·6573·2061·6e64·206e·6f74··packages·and·not | |||
| 00039c60:·2022·6f70·656e·7368·6966·742d·6b75·6265···"openshift-kube | |||
| 00039c70:·6c65·7422·2069·6e20·616e·7369·626c·655f··let"·in·ansible_ | |||
| 00039c80:·6661·6374·732e·7061·636b·6167·6573·0a20··facts.packages.· | |||
| 00039c90:·2020·2029·0a20·2074·6167·733a·0a20·202d·····).··tags:.··- | |||
| 00039ca0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 00039cb0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00039cc0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00039cd0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00039ce0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00039cf0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00039d00:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 00039d10:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 00039d20:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00039d30:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00039d40:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00039d50:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00039d60:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00039d70:·7267·6574·3d22·2369·646d·3831·3237·2220··rget="#idm8127"· | |||
| 00039d80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00039d90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00039da0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00039db0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00039dc0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00039dd0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00039de0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00039 | 00039ab0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | ||
| 00039 | 00039ac0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00039 | 00039ad0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00039 | 00039ae0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00039 | 00039af0:·6964·6d38·3132·3722·3e3c·7461·626c·6520··idm8127"><table· | ||
| 00039b00:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039b10:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039b20:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039b30:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039b40:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039b50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039b60:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039b70:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039b80:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039b90:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039e40:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 00039e50:·5d0a·6e61·6d65·203d·2022·646e·662d·6175··].name·=·"dnf-au | |||
| 00039e60:·746f·6d61·7469·6322·0a76·6572·7369·6f6e··tomatic".version | |||
| 00039e70:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 00039e80:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00039e90:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00039ea0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00039eb0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00039ec0:·2d74·6172·6765·743d·2223·6964·6d38·3132··-target="#idm812 | |||
| 00039ed0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 00039ee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| Max diff block lines reached; 3341256/3371230 bytes (99.11%) of diff not shown. | |||
| Offset 83, 50 lines modified | Offset 83, 31 lines modified | ||
| 83 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ············suitable·for·automatic,·regular·execution. | 84 | ············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ··medium | 85 | Severity: ··medium |
| 86 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 87 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 88 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 95 | -·name:·Gather·the·package·facts | ||
| 96 | ··package_facts: | ||
| 97 | ····manager:·auto | ||
| 98 | ··tags: | ||
| 99 | ··-·enable_strategy | ||
| 100 | ··-·low_complexity | ||
| 101 | ··-·low_disruption | ||
| 102 | ··-·medium_severity | ||
| 103 | ··-·no_reboot_needed | ||
| 104 | ··-·package_dnf-automatic_installed | ||
| 105 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 106 | ··package: | ||
| 107 | ····name:·dnf-automatic | ||
| 108 | ····state:·present | ||
| 109 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 110 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 111 | ansible_facts.packages | ||
| 112 | ····) | ||
| 113 | ··tags: | ||
| 114 | ··-·enable_strategy | ||
| 115 | ··-·low_complexity | ||
| 116 | ··-·low_disruption | ||
| 117 | ··-·medium_severity | ||
| 118 | ··-·no_reboot_needed | ||
| 119 | ··-·package_dnf-automatic_installed | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | [[packages]] | 91 | [[packages]] |
| 122 | name·=·"dnf-automatic" | 92 | name·=·"dnf-automatic" |
| 123 | version·=·"*" | 93 | version·=·"*" |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 99 | include·install_dnf-automatic | ||
| 100 | class·install_dnf-automatic·{ | ||
| 101 | ··package·{·'dnf-automatic': | ||
| 102 | ····ensure·=>·'installed', | ||
| 103 | ··} | ||
| 104 | } | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | 110 | #·Remediation·is·applicable·only·in·certain·platforms |
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 111 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 135, 33 lines modified | Offset 116, 52 lines modified | ||
| 135 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 116 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 136 | ····dnf·install·-y·"dnf-automatic" | 117 | ····dnf·install·-y·"dnf-automatic" |
| 137 | fi | 118 | fi |
| 138 | else | 119 | else |
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 140 | fi | 121 | fi |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | include·install_dnf-automatic | ||
| 147 | class·install_dnf-automatic·{ | ||
| 148 | 127 | package·--add=dnf-automatic | |
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8 | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Gather·the·package·facts | ||
| 134 | ··package_facts: | ||
| 135 | ····manager:·auto | ||
| 136 | ··tags: | ||
| 137 | ··-·enable_strategy | ||
| 138 | ··-·low_complexity | ||
| 139 | ··-·low_disruption | ||
| 140 | ··-·medium_severity | ||
| 141 | ··-·no_reboot_needed | ||
| 142 | ··-·package_dnf-automatic_installed | ||
| 157 | 143 | -·name:·Ensure·dnf-automatic·is·installed | |
| 144 | ··package: | ||
| 145 | ····name:·dnf-automatic | ||
| 146 | ····state:·present | ||
| 147 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 148 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 149 | ansible_facts.packages | ||
| 150 | ····) | ||
| 151 | ··tags: | ||
| 152 | ··-·enable_strategy | ||
| 153 | ··-·low_complexity | ||
| 154 | ··-·low_disruption | ||
| 155 | ··-·medium_severity | ||
| 156 | ··-·no_reboot_needed | ||
| 157 | ··-·package_dnf-automatic_installed | ||
| 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 159 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 159 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 160 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 160 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 161 | automatic.conf. | 161 | automatic.conf. |
| 162 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 162 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 163 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 163 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 164 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 164 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 306, 14 lines modified | Offset 306, 43 lines modified | ||
| 306 | ···························(a),·CM-11(b) | 306 | ···························(a),·CM-11(b) |
| 307 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 307 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 308 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 308 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 309 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 310 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 311 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 311 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| Max diff block lines reached; 207114/212180 bytes (97.61%) of diff not shown. | |||
| Offset 15141, 408 lines modified | Offset 15141, 408 lines modified | ||
| 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b250:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | 0003b250:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | ||
| 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b2b0:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b2c0:· | 0003b2c0:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b2d0:· | 0003b2d0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b2e0:· | 0003b2e0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b2f0:· | 0003b2f0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b300:· | 0003b300:·646d·3437·3632·223e·3c70·7265·3e3c·636f··dm4762"><pre><co | ||
| 0003b310:·6 | 0003b310:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003b320:· | 0003b320:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003b330:·6 | 0003b330:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003b340:·6 | 0003b340:·6c61·7466·6f72·6d73·0a69·6620·2120·2820··latforms.if·!·(· | ||
| 0003b350:· | 0003b350:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b360:· | 0003b360:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | ||
| 0003b370:· | 0003b370:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b380:·69 | 0003b380:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | ||
| 0003b390:· | 0003b390:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | ||
| 0003b3a0:·7 | 0003b3a0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b3b0:· | 0003b3b0:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | ||
| 0003b3c0:· | 0003b3c0:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | ||
| 0003b3d0:· | 0003b3d0:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | ||
| 0003b3e0:· | 0003b3e0:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | ||
| 0003b3f0:· | 0003b3f0:·7468·656e·0a0a·2320·4669·6e64·2077·6869··then..#·Find·whi | ||
| 0003b400:· | 0003b400:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | ||
| 0003b410:· | 0003b410:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | ||
| 0003b420:· | 0003b420:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | ||
| 0003b430:· | 0003b430:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | ||
| 0003b440:· | 0003b440:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | ||
| 0003b450:·6 | 0003b450:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | ||
| 0003b460:· | 0003b460:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | ||
| 0003b470:· | 0003b470:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b480:· | 0003b480:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | ||
| 0003b490:·2 | 0003b490:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | ||
| 0003b4a0:· | 0003b4a0:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | ||
| 0003b4b0:·20 | 0003b4b0:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | ||
| 0003b4c0:· | 0003b4c0:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | ||
| 0003b4d0:· | 0003b4d0:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | ||
| 0003b4e0:· | 0003b4e0:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | ||
| 0003b4f0:· | 0003b4f0:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | ||
| 0003b500:· | 0003b500:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | ||
| 0003b510:· | 0003b510:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | ||
| 0003b520:· | 0003b520:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | ||
| 0003b530:· | 0003b530:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | ||
| 0003b540:· | 0003b540:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | ||
| 0003b550:·6 | 0003b550:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | ||
| 0003b560:· | 0003b560:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | ||
| 0003b570:· | 0003b570:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003b580:· | 0003b580:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | ||
| 0003b590:·6 | 0003b590:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b5a0:· | 0003b5a0:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | ||
| 0003b5b0:· | 0003b5b0:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | ||
| 0003b5c0:· | 0003b5c0:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | ||
| 0003b5d0:· | 0003b5d0:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | ||
| 0003b5e0:· | 0003b5e0:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | ||
| 0003b5f0:·6 | 0003b5f0:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | ||
| 0003b600:·2 | 0003b600:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | ||
| 0003b610:· | 0003b610:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | ||
| 0003b620:· | 0003b620:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | ||
| 0003b630:·6 | 0003b630:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | ||
| 0003b640:· | 0003b640:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b650:· | 0003b650:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b660:· | 0003b660:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b670:·61 | 0003b670:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b680:· | 0003b680:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b690:· | 0003b690:·743d·2223·6964·6d34·3736·3322·2074·6162··t="#idm4763"·tab | ||
| 0003b6a0:· | 0003b6a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b6b0:·6 | 0003b6b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b6c0:· | 0003b6c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b6d0:·74 | 0003b6d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b6e0:· | 0003b6e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b6f0:· | 0003b6f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b700:· | 0003b700:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b710:· | 0003b710:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b720:·6 | 0003b720:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b730:·6 | 0003b730:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b740:· | 0003b740:·643d·2269·646d·3437·3633·223e·3c74·6162··d="idm4763"><tab | ||
| 0003b750:· | 0003b750:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b760:· | 0003b760:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b770:· | 0003b770:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b780:· | 0003b780:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003b790:· | 0003b790:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003b7a0:· | 0003b7a0:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003b7b0:· | 0003b7b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b7c0:· | 0003b7c0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003b7d0:· | 0003b7d0:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | ||
| 0003b7e0:·2 | 0003b7e0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b7f0:· | 0003b7f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b800:· | 0003b800:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b810:· | 0003b810:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b820:· | 0003b820:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003b830:· | 0003b830:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003b840:· | 0003b840:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003b850:· | 0003b850:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | ||
| 0003b860:· | 0003b860:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | ||
| 0003b870:·766 | 0003b870:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | ||
| 0003b880:·6d | 0003b880:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | ||
| 0003b890:· | 0003b890:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003b8a0:· | 0003b8a0:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003b8b0:· | 0003b8b0:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003b8c0:· | 0003b8c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003b8d0:· | 0003b8d0:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003b8e0:·3 | 0003b8e0:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003b8f0:· | 0003b8f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003b900:· | 0003b900:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003b910:· | 0003b910:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003b920:· | 0003b920:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b930:· | 0003b930:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003b940:· | 0003b940:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003b950:· | 0003b950:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003b960:· | 0003b960:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003b970:·6 | 0003b970:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003b980:· | 0003b980:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003b990:· | 0003b990:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003b9a0:· | 0003b9a0:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003b9b0:· | 0003b9b0:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003b9c0:· | 0003b9c0:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003b9d0:· | 0003b9d0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003b9e0:· | 0003b9e0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003b9f0:· | 0003b9f0:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003ba00:·6 | 0003ba00:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003ba10:· | 0003ba10:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| Max diff block lines reached; 6023001/6077953 bytes (99.10%) of diff not shown. | |||
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 115 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 116 | ··package_facts: | 129 | ··package_facts: |
| Offset 277, 33 lines modified | Offset 296, 14 lines modified | ||
| 277 | ··-·PCI-DSSv4-11.5.2 | 296 | ··-·PCI-DSSv4-11.5.2 |
| 278 | ··-·high_complexity | 297 | ··-·high_complexity |
| 279 | ··-·high_severity | 298 | ··-·high_severity |
| 280 | ··-·medium_disruption | 299 | ··-·medium_disruption |
| 281 | ··-·no_reboot_needed | 300 | ··-·no_reboot_needed |
| 282 | ··-·restrict_strategy | 301 | ··-·restrict_strategy |
| 283 | ··-·rpm_verify_hashes | 302 | ··-·rpm_verify_hashes |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 286 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 287 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 288 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 289 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 290 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 291 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 292 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 293 | fi | ||
| 294 | else | ||
| 295 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 296 | fi | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 304 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 299 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 305 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 300 | run·the·following·command·to·determine·which·package·owns·it: | 306 | run·the·following·command·to·determine·which·package·owns·it: |
| 301 | $·rpm·-qf·FILENAME | 307 | $·rpm·-qf·FILENAME |
| 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 303 | $·sudo·rpm·--restore·PACKAGENAME | 309 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 322, 14 lines modified | Offset 322, 46 lines modified | ||
| 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 322 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 323 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 323 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 334 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 335 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 336 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 337 | declare·-A·SETPERMS_RPM_DICT | ||
| 338 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 339 | #·is·expected·by·the·RPM·database | ||
| 340 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 341 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 342 | do | ||
| 343 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 344 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 345 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 346 | done | ||
| 347 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 348 | #·correct·values | ||
| 349 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 350 | do | ||
| 351 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 352 | done | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 334 | -·name:·Gather·the·package·facts | 361 | -·name:·Gather·the·package·facts |
| 335 | ··package_facts: | 362 | ··package_facts: |
| Offset 437, 46 lines modified | Offset 469, 14 lines modified | ||
| 437 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 438 | ··-·high_complexity | 470 | ··-·high_complexity |
| 439 | ··-·high_severity | 471 | ··-·high_severity |
| 440 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 441 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 442 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 443 | ··-·rpm_verify_ownership | 475 | ··-·rpm_verify_ownership |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 637923/645634 bytes (98.81%) of diff not shown. | |||
| Offset 15167, 408 lines modified | Offset 15167, 408 lines modified | ||
| 0003b3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b3e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b3f0:·2369·646d·3437·3632·2220·7461·6269·6e64··#idm4762"·tabind | 0003b3f0:·2369·646d·3437·3632·2220·7461·6269·6e64··#idm4762"·tabind | ||
| 0003b400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b450:·5265·6d65·6469·6174·696f·6e20· | 0003b450:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b460:·6 | 0003b460:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b470:· | 0003b470:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b480:·7 | 0003b480:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b490:·6 | 0003b490:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b4a0:· | 0003b4a0:·3437·3632·223e·3c70·7265·3e3c·636f·6465··4762"><pre><code | ||
| 0003b4b0:· | 0003b4b0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b4c0:· | 0003b4c0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b4d0:· | 0003b4d0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003b4e0:· | 0003b4e0:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003b4f0:·7 | 0003b4f0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003b500:· | 0003b500:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003b510:· | 0003b510:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b520:·727 | 0003b520:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003b530:·3 | 0003b530:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b540:· | 0003b540:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003b550:· | 0003b550:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003b560:·7 | 0003b560:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003b570:· | 0003b570:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003b580:·6 | 0003b580:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003b590:· | 0003b590:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003b5a0:· | 0003b5a0:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003b5b0:· | 0003b5b0:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003b5c0:·6 | 0003b5c0:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003b5d0:· | 0003b5d0:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003b5e0:·6 | 0003b5e0:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003b5f0:· | 0003b5f0:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003b600:· | 0003b600:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003b610:· | 0003b610:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b620:· | 0003b620:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003b630:· | 0003b630:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003b640:· | 0003b640:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003b650:· | 0003b650:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003b660:· | 0003b660:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003b670:· | 0003b670:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b680:· | 0003b680:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003b690:· | 0003b690:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003b6a0:· | 0003b6a0:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003b6b0:· | 0003b6b0:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003b6c0:·20 | 0003b6c0:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003b6d0:· | 0003b6d0:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003b6e0:· | 0003b6e0:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003b6f0:·6 | 0003b6f0:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003b700:·2 | 0003b700:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003b710:· | 0003b710:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003b720:· | 0003b720:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003b730:· | 0003b730:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b740:· | 0003b740:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003b750:· | 0003b750:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003b760:·6 | 0003b760:·646e·6620·7265·696e·7374·616c·6c20·2d79··dnf·reinstall·-y | ||
| 0003b770:·2 | 0003b770:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003b780:·6 | 0003b780:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003b790:· | 0003b790:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003b7a0:· | 0003b7a0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003b7b0:·6 | 0003b7b0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003b7c0:· | 0003b7c0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003b7d0:· | 0003b7d0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003b7e0:· | 0003b7e0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b7f0:· | 0003b7f0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b800:·62 | 0003b800:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b810:·6 | 0003b810:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b820:· | 0003b820:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b830:· | 0003b830:·2223·6964·6d34·3736·3322·2074·6162·696e··"#idm4763"·tabin | ||
| 0003b840:· | 0003b840:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b850:· | 0003b850:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b860:·6 | 0003b860:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b870:· | 0003b870:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b880:·657 | 0003b880:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b890:· | 0003b890:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b8a0:· | 0003b8a0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b8b0:· | 0003b8b0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b8c0:· | 0003b8c0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b8d0:· | 0003b8d0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b8e0:·22 | 0003b8e0:·2269·646d·3437·3633·223e·3c74·6162·6c65··"idm4763"><table | ||
| 0003b8f0:·20 | 0003b8f0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b900:· | 0003b900:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b910:· | 0003b910:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b920:· | 0003b920:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b930:·3 | 0003b930:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b940:·2 | 0003b940:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b950:· | 0003b950:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b960:· | 0003b960:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b970:· | 0003b970:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b980:· | 0003b980:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b990:· | 0003b990:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b9a0:· | 0003b9a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b9b0:· | 0003b9b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b9c0:· | 0003b9c0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b9d0:· | 0003b9d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b9e0:· | 0003b9e0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b9f0:· | 0003b9f0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003ba00:· | 0003ba00:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003ba10:·7 | 0003ba10:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003ba20:·6 | 0003ba20:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003ba30:·6 | 0003ba30:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003ba40:· | 0003ba40:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003ba50:· | 0003ba50:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003ba60:· | 0003ba60:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003ba70:· | 0003ba70:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003ba80:· | 0003ba80:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003ba90:· | 0003ba90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003baa0:· | 0003baa0:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003bab0:· | 0003bab0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003bac0:· | 0003bac0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bad0:· | 0003bad0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bae0:· | 0003bae0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003baf0:· | 0003baf0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003bb00:· | 0003bb00:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003bb10:· | 0003bb10:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003bb20:· | 0003bb20:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003bb30:· | 0003bb30:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003bb40:· | 0003bb40:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bb50:· | 0003bb50:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003bb60:·7 | 0003bb60:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bb70:·6 | 0003bb70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bb80:· | 0003bb80:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bb90:· | 0003bb90:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bba0:· | 0003bba0:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bbb0:· | 0003bbb0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| Max diff block lines reached; 18799503/18854455 bytes (99.71%) of diff not shown. | |||
| Offset 110, 14 lines modified | Offset 110, 33 lines modified | ||
| 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 119 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 127 | else | ||
| 128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 129 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Gather·the·package·facts | 135 | -·name:·Gather·the·package·facts |
| 123 | ··package_facts: | 136 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 311 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 306 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 312 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 307 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 313 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 331, 14 lines modified | Offset 331, 50 lines modified | ||
| 331 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 331 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 333 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 333 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 334 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 334 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 336 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 336 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 337 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 337 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 343 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 344 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 345 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 346 | declare·-A·SETPERMS_RPM_DICT | ||
| 347 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 348 | #·is·expected·by·the·RPM·database | ||
| 349 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 350 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 351 | do | ||
| 352 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 353 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 354 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 355 | ········do | ||
| 356 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 357 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 358 | ········done | ||
| 359 | done | ||
| 360 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 361 | #·correct·values | ||
| 362 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 363 | do | ||
| 364 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 365 | done | ||
| 366 | else | ||
| 367 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 368 | fi | ||
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 343 | -·name:·Gather·the·package·facts | 374 | -·name:·Gather·the·package·facts |
| 344 | ··package_facts: | 375 | ··package_facts: |
| Offset 450, 50 lines modified | Offset 486, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 486 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 487 | ··-·high_complexity |
| 452 | ··-·high_severity | 488 | ··-·high_severity |
| 453 | ··-·medium_disruption | 489 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 490 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 491 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_permissions | 492 | ··-·rpm_verify_permissions |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1515313/1523397 bytes (99.47%) of diff not shown. | |||
| Offset 15179, 408 lines modified | Offset 15179, 408 lines modified | ||
| 0003b4a0:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | 0003b4a0:·7461·2d74·6172·6765·743d·2223·6964·6d34··ta-target="#idm4 | ||
| 0003b4b0:·3736·3222·2074·6162·696e·6465·783d·2230··762"·tabindex="0 | 0003b4b0:·3736·3222·2074·6162·696e·6465·783d·2230··762"·tabindex="0 | ||
| 0003b4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b4c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b500:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b510:·6961·7469·6f6e·20 | 0003b510:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b520:·6 | 0003b520:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b530:· | 0003b530:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b540:· | 0003b540:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b550:· | 0003b550:·7365·2220·6964·3d22·6964·6d34·3736·3222··se"·id="idm4762" | ||
| 0003b560:·3 | 0003b560:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b570:· | 0003b570:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b580:· | 0003b580:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b590:·6 | 0003b590:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b5a0:· | 0003b5a0:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b5b0:· | 0003b5b0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b5c0:· | 0003b5c0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b5d0:· | 0003b5d0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b5e0:· | 0003b5e0:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b5f0:· | 0003b5f0:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b600:· | 0003b600:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b610:·3 | 0003b610:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b620:· | 0003b620:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b630:· | 0003b630:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b640:·74 | 0003b640:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b650:·2 | 0003b650:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b660:· | 0003b660:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b670:·20 | 0003b670:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b680:·74 | 0003b680:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b690:· | 0003b690:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b6a0:·206 | 0003b6a0:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b6b0:· | 0003b6b0:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b6c0:· | 0003b6c0:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b6d0:· | 0003b6d0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b6e0:· | 0003b6e0:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b6f0:· | 0003b6f0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b700:·2d | 0003b700:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b710:· | 0003b710:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b720:· | 0003b720:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b730:· | 0003b730:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b740:· | 0003b740:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b750:· | 0003b750:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b760:· | 0003b760:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b770:· | 0003b770:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b780:· | 0003b780:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b790:· | 0003b790:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b7a0:·2 | 0003b7a0:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b7b0:·6 | 0003b7b0:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b7c0:· | 0003b7c0:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b7d0:· | 0003b7d0:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b7e0:· | 0003b7e0:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b7f0:·6 | 0003b7f0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b800:· | 0003b800:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b810:· | 0003b810:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | ||
| 0003b820:· | 0003b820:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b830:·6 | 0003b830:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b840:·6 | 0003b840:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b850:· | 0003b850:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b860:·6 | 0003b860:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b870:· | 0003b870:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b880:·6 | 0003b880:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b890:· | 0003b890:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b8a0:· | 0003b8a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b8b0:·6 | 0003b8b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b8c0:· | 0003b8c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b8d0:·6 | 0003b8d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b8e0:·6 | 0003b8e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b8f0:· | 0003b8f0:·3437·3633·2220·7461·6269·6e64·6578·3d22··4763"·tabindex=" | ||
| 0003b900:· | 0003b900:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b910:· | 0003b910:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b920:·6 | 0003b920:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b930:·7 | 0003b930:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b940:· | 0003b940:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b950:· | 0003b950:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b960:· | 0003b960:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b970:·6 | 0003b970:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b980:·6 | 0003b980:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b990:· | 0003b990:·6c6c·6170·7365·2220·6964·3d22·6964·6d34··llapse"·id="idm4 | ||
| 0003b9a0:· | 0003b9a0:·3736·3322·3e3c·7461·626c·6520·636c·6173··763"><table·clas | ||
| 0003b9b0:·733 | 0003b9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b9c0:· | 0003b9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b9d0:· | 0003b9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b9e0:· | 0003b9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b9f0:· | 0003b9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003ba00:· | 0003ba00:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003ba10:· | 0003ba10:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003ba20:·6 | 0003ba20:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003ba30:· | 0003ba30:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003ba50:· | 0003ba50:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba60:· | 0003ba60:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003ba70:· | 0003ba70:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003ba80:· | 0003ba80:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003ba90:·3 | 0003ba90:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003baa0:· | 0003baa0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003bab0:· | 0003bab0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003bac0:· | 0003bac0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003bad0:· | 0003bad0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003bae0:· | 0003bae0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003baf0:· | 0003baf0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003bb00:· | 0003bb00:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bb10:· | 0003bb10:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bb20:· | 0003bb20:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bb30:·2 | 0003bb30:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bb40:· | 0003bb40:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003bb50:· | 0003bb50:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bb60:· | 0003bb60:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bb70:· | 0003bb70:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bb80:· | 0003bb80:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bb90:· | 0003bb90:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bba0:·2 | 0003bba0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bbb0:·2d | 0003bbb0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bbc0:· | 0003bbc0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bbd0:· | 0003bbd0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bbe0:· | 0003bbe0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bbf0:·6 | 0003bbf0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bc00:·6 | 0003bc00:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bc10:·6 | 0003bc10:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bc20:· | 0003bc20:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bc30:·6 | 0003bc30:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bc40:·6674· | 0003bc40:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bc50:· | 0003bc50:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bc60:·6 | 0003bc60:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003bc70:· | 0003bc70:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| Max diff block lines reached; 10398562/10453514 bytes (99.47%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 285, 33 lines modified | Offset 304, 14 lines modified | ||
| 285 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 286 | ··-·high_complexity | 305 | ··-·high_complexity |
| 287 | ··-·high_severity | 306 | ··-·high_severity |
| 288 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 289 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 291 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 308 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 309 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 311 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 445, 46 lines modified | Offset 477, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·high_complexity | 478 | ··-·high_complexity |
| 447 | ··-·high_severity | 479 | ··-·high_severity |
| 448 | ··-·medium_disruption | 480 | ··-·medium_disruption |
| 449 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 450 | ··-·restrict_strategy | 482 | ··-·restrict_strategy |
| 451 | ··-·rpm_verify_ownership | 483 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1006767/1014478 bytes (99.24%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·7267·6574·3d22·2369·646d·3437·3632·2220··rget="#idm4762"· | 0003b4b0:·7267·6574·3d22·2369·646d·3437·3632·2220··rget="#idm4762"· | ||
| 0003b4c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b4c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b4d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b4d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b4e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b4e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b4f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b4f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b500:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b500:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b510:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b520:·6e20· | 0003b520:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003b530:· | 0003b530:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b540:· | 0003b540:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b550:·6 | 0003b550:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b560:· | 0003b560:·643d·2269·646d·3437·3632·223e·3c70·7265··d="idm4762"><pre | ||
| 0003b570:· | 0003b570:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b580:· | 0003b580:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003b590:· | 0003b590:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003b5a0:· | 0003b5a0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003b5b0:· | 0003b5b0:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003b5c0:· | 0003b5c0:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003b5d0:·6 | 0003b5d0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b5e0:· | 0003b5e0:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003b5f0:·7 | 0003b5f0:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003b600:·6 | 0003b600:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b610:· | 0003b610:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003b620:·6 | 0003b620:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003b630:· | 0003b630:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003b640:· | 0003b640:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003b650:· | 0003b650:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003b660:· | 0003b660:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003b670:·6 | 0003b670:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003b680:· | 0003b680:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003b690:· | 0003b690:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003b6a0:· | 0003b6a0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003b6b0:· | 0003b6b0:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003b6c0:· | 0003b6c0:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003b6d0:· | 0003b6d0:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003b6e0:· | 0003b6e0:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003b6f0:· | 0003b6f0:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003b700:· | 0003b700:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003b710:· | 0003b710:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003b720:· | 0003b720:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003b730:·5 | 0003b730:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003b740:· | 0003b740:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b750:·2 | 0003b750:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003b760:· | 0003b760:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003b770:·2 | 0003b770:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003b780:· | 0003b780:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003b790:· | 0003b790:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003b7a0:· | 0003b7a0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003b7b0:· | 0003b7b0:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003b7c0:· | 0003b7c0:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003b7d0:· | 0003b7d0:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b7e0:· | 0003b7e0:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003b7f0:· | 0003b7f0:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003b800:· | 0003b800:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003b810:· | 0003b810:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003b820:· | 0003b820:·200a·2020·2020·646e·6620·7265·696e·7374···.····dnf·reinst | ||
| 0003b830:·6 | 0003b830:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003b840:· | 0003b840:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003b850:·20 | 0003b850:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003b860:· | 0003b860:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003b870:·2 | 0003b870:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003b880:·6 | 0003b880:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003b890:·6 | 0003b890:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003b8a0:·20 | 0003b8a0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003b8b0:·6 | 0003b8b0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b8c0:· | 0003b8c0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b8d0:·7 | 0003b8d0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b8e0:·6 | 0003b8e0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b8f0:·6 | 0003b8f0:·6172·6765·743d·2223·6964·6d34·3736·3322··arget="#idm4763" | ||
| 0003b900:· | 0003b900:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b910:· | 0003b910:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b920:· | 0003b920:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b930:· | 0003b930:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b940:· | 0003b940:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b950:·6 | 0003b950:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b960:·6 | 0003b960:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003b970:· | 0003b970:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b980:·6 | 0003b980:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b990:· | 0003b990:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b9a0:· | 0003b9a0:·6522·2069·643d·2269·646d·3437·3633·223e··e"·id="idm4763"> | ||
| 0003b9b0:· | 0003b9b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b9c0:· | 0003b9c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b9d0:· | 0003b9d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b9e0:·2 | 0003b9e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b9f0:· | 0003b9f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003ba00:· | 0003ba00:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003ba10:· | 0003ba10:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003ba20:·3 | 0003ba20:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003ba30:·2 | 0003ba30:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003ba40:· | 0003ba40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ba50:· | 0003ba50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003ba60:· | 0003ba60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003ba70:· | 0003ba70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003ba80:·3 | 0003ba80:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003ba90:·43 | 0003ba90:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003baa0:· | 0003baa0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003bab0:· | 0003bab0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003bac0:· | 0003bac0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003bad0:· | 0003bad0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003bae0:· | 0003bae0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003baf0:· | 0003baf0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003bb00:· | 0003bb00:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003bb10:· | 0003bb10:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003bb20:· | 0003bb20:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003bb30:· | 0003bb30:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003bb40:· | 0003bb40:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003bb50:· | 0003bb50:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb60:· | 0003bb60:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003bb70:· | 0003bb70:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003bb80:·2 | 0003bb80:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb90:· | 0003bb90:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003bba0:· | 0003bba0:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003bbb0:· | 0003bbb0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bbc0:· | 0003bbc0:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003bbd0:· | 0003bbd0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003bbe0:· | 0003bbe0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003bbf0:· | 0003bbf0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003bc00:· | 0003bc00:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003bc10:· | 0003bc10:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003bc20:· | 0003bc20:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003bc30:· | 0003bc30:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003bc40:·6 | 0003bc40:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003bc50:· | 0003bc50:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003bc60:·6 | 0003bc60:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003bc70:· | 0003bc70:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| 0003bc80:· | 0003bc80:·3a20·5061·636b·6167·6520·6d61·6e61·6765··:·Package·manage | ||
| Max diff block lines reached; 10397801/10452753 bytes (99.47%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 285, 33 lines modified | Offset 304, 14 lines modified | ||
| 285 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 286 | ··-·high_complexity | 305 | ··-·high_complexity |
| 287 | ··-·high_severity | 306 | ··-·high_severity |
| 288 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 289 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 291 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 308 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 309 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 311 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 445, 46 lines modified | Offset 477, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·high_complexity | 478 | ··-·high_complexity |
| 447 | ··-·high_severity | 479 | ··-·high_severity |
| 448 | ··-·medium_disruption | 480 | ··-·medium_disruption |
| 449 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 450 | ··-·restrict_strategy | 482 | ··-·restrict_strategy |
| 451 | ··-·rpm_verify_ownership | 483 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1006767/1014478 bytes (99.24%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b4c0:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | 0003b4c0:·3d22·2369·646d·3437·3632·2220·7461·6269··="#idm4762"·tabi | ||
| 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b520:·223e·5265·6d65·6469·6174·696f·6e20· | 0003b520:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003b530:· | 0003b530:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003b540:· | 0003b540:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b550:· | 0003b550:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b560:· | 0003b560:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b570:· | 0003b570:·646d·3437·3632·223e·3c70·7265·3e3c·636f··dm4762"><pre><co | ||
| 0003b580:·6 | 0003b580:·6465·3e23·2052·656d·6564·6961·7469·6f6e··de>#·Remediation | ||
| 0003b590:· | 0003b590:·2069·7320·6170·706c·6963·6162·6c65·206f···is·applicable·o | ||
| 0003b5a0:·6 | 0003b5a0:·6e6c·7920·696e·2063·6572·7461·696e·2070··nly·in·certain·p | ||
| 0003b5b0:·6 | 0003b5b0:·6c61·7466·6f72·6d73·0a69·6620·2120·2820··latforms.if·!·(· | ||
| 0003b5c0:· | 0003b5c0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b5d0:· | 0003b5d0:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | ||
| 0003b5e0:· | 0003b5e0:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b5f0:·69 | 0003b5f0:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | ||
| 0003b600:· | 0003b600:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | ||
| 0003b610:·7 | 0003b610:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b620:· | 0003b620:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | ||
| 0003b630:· | 0003b630:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | ||
| 0003b640:· | 0003b640:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | ||
| 0003b650:· | 0003b650:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | ||
| 0003b660:· | 0003b660:·7468·656e·0a0a·2320·4669·6e64·2077·6869··then..#·Find·whi | ||
| 0003b670:· | 0003b670:·6368·2066·696c·6573·2068·6176·6520·696e··ch·files·have·in | ||
| 0003b680:· | 0003b680:·636f·7272·6563·7420·6861·7368·2028·6e6f··correct·hash·(no | ||
| 0003b690:· | 0003b690:·7420·696e·202f·6574·632c·2062·6563·6175··t·in·/etc,·becau | ||
| 0003b6a0:· | 0003b6a0:·7365·206f·6620·7468·6520·7379·7374·656d··se·of·the·system | ||
| 0003b6b0:· | 0003b6b0:·2072·656c·6174·6564·2063·6f6e·6669·6720···related·config· | ||
| 0003b6c0:·6 | 0003b6c0:·6669·6c65·7329·2061·6e64·2074·6865·6e20··files)·and·then· | ||
| 0003b6d0:· | 0003b6d0:·6765·7420·6669·6c65·7320·6e61·6d65·730a··get·files·names. | ||
| 0003b6e0:· | 0003b6e0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b6f0:· | 0003b6f0:·7265·6374·5f68·6173·683d·2224·2872·706d··rect_hash="$(rpm | ||
| 0003b700:·2 | 0003b700:·202d·5661·202d·2d6e·6f63·6f6e·6669·6720···-Va·--noconfig· | ||
| 0003b710:· | 0003b710:·7c20·6772·6570·202d·4520·275e·2e2e·3527··|·grep·-E·'^..5' | ||
| 0003b720:·20 | 0003b720:·207c·2061·776b·2027·7b70·7269·6e74·2024···|·awk·'{print·$ | ||
| 0003b730:· | 0003b730:·4e46·7d27·2029·220a·0a69·6620·5b20·2d6e··NF}'·)"..if·[·-n | ||
| 0003b740:· | 0003b740:·2022·2466·696c·6573·5f77·6974·685f·696e···"$files_with_in | ||
| 0003b750:· | 0003b750:·636f·7272·6563·745f·6861·7368·2220·5d3b··correct_hash"·]; | ||
| 0003b760:· | 0003b760:·2074·6865·6e0a·2020·2020·2320·4672·6f6d···then.····#·From | ||
| 0003b770:· | 0003b770:·2066·696c·6573·206e·616d·6573·2067·6574···files·names·get | ||
| 0003b780:· | 0003b780:·2070·6163·6b61·6765·206e·616d·6573·2061···package·names·a | ||
| 0003b790:· | 0003b790:·6e64·2063·6861·6e67·6520·6e65·776c·696e··nd·change·newlin | ||
| 0003b7a0:· | 0003b7a0:·6520·746f·2073·7061·6365·2c20·6265·6361··e·to·space,·beca | ||
| 0003b7b0:· | 0003b7b0:·7573·6520·7270·6d20·7772·6974·6573·2065··use·rpm·writes·e | ||
| 0003b7c0:·6 | 0003b7c0:·6163·6820·7061·636b·6167·6520·746f·206e··ach·package·to·n | ||
| 0003b7d0:· | 0003b7d0:·6577·206c·696e·650a·2020·2020·7061·636b··ew·line.····pack | ||
| 0003b7e0:· | 0003b7e0:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003b7f0:· | 0003b7f0:·6c3d·2224·2872·706d·202d·7166·2024·6669··l="$(rpm·-qf·$fi | ||
| 0003b800:·6 | 0003b800:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b810:· | 0003b810:·6374·5f68·6173·6820·7c20·7472·2027·5c6e··ct_hash·|·tr·'\n | ||
| 0003b820:· | 0003b820:·2720·2720·2729·220a·0a20·2020·200a·2020··'·'·')"..····.·· | ||
| 0003b830:· | 0003b830:·2020·646e·6620·7265·696e·7374·616c·6c20····dnf·reinstall· | ||
| 0003b840:· | 0003b840:·2d79·2024·7061·636b·6167·6573·5f74·6f5f··-y·$packages_to_ | ||
| 0003b850:· | 0003b850:·7265·696e·7374·616c·6c0a·2020·2020·0a66··reinstall.····.f | ||
| 0003b860:·6 | 0003b860:·690a·0a65·6c73·650a·2020·2020·2667·743b··i..else.····> | ||
| 0003b870:·2 | 0003b870:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | ||
| 0003b880:· | 0003b880:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | ||
| 0003b890:· | 0003b890:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | ||
| 0003b8a0:·6 | 0003b8a0:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | ||
| 0003b8b0:· | 0003b8b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b8c0:· | 0003b8c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b8d0:· | 0003b8d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b8e0:·61 | 0003b8e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b8f0:· | 0003b8f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b900:· | 0003b900:·743d·2223·6964·6d34·3736·3322·2074·6162··t="#idm4763"·tab | ||
| 0003b910:· | 0003b910:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b920:·6 | 0003b920:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b930:· | 0003b930:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b940:·74 | 0003b940:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b950:· | 0003b950:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b960:· | 0003b960:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003b970:· | 0003b970:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 0003b980:· | 0003b980:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b990:·6 | 0003b990:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b9a0:·6 | 0003b9a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b9b0:· | 0003b9b0:·643d·2269·646d·3437·3633·223e·3c74·6162··d="idm4763"><tab | ||
| 0003b9c0:· | 0003b9c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003b9d0:· | 0003b9d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003b9e0:· | 0003b9e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003b9f0:· | 0003b9f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003ba00:· | 0003ba00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003ba10:· | 0003ba10:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | ||
| 0003ba20:· | 0003ba20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ba30:· | 0003ba30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003ba40:· | 0003ba40:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | ||
| 0003ba50:·2 | 0003ba50:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003ba60:· | 0003ba60:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003ba70:· | 0003ba70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003ba80:· | 0003ba80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003ba90:· | 0003ba90:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003baa0:· | 0003baa0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003bab0:· | 0003bab0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003bac0:· | 0003bac0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | ||
| 0003bad0:· | 0003bad0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | ||
| 0003bae0:·766 | 0003bae0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | ||
| 0003baf0:·6d | 0003baf0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | ||
| 0003bb00:· | 0003bb00:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | ||
| 0003bb10:· | 0003bb10:·2e31·302e·342e·310a·2020·2d20·4e49·5354··.10.4.1.··-·NIST | ||
| 0003bb20:· | 0003bb20:·2d38·3030·2d31·3731·2d33·2e33·2e38·0a20··-800-171-3.3.8.· | ||
| 0003bb30:· | 0003bb30:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003bb40:· | 0003bb40:·332e·342e·310a·2020·2d20·4e49·5354·2d38··3.4.1.··-·NIST-8 | ||
| 0003bb50:·3 | 0003bb50:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | ||
| 0003bb60:· | 0003bb60:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bb70:· | 0003bb70:·2d36·2863·290a·2020·2d20·4e49·5354·2d38··-6(c).··-·NIST-8 | ||
| 0003bb80:· | 0003bb80:·3030·2d35·332d·434d·2d36·2864·290a·2020··00-53-CM-6(d).·· | ||
| 0003bb90:· | 0003bb90:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bba0:· | 0003bba0:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003bbb0:· | 0003bbb0:·3533·2d53·492d·3728·3129·0a20·202d·204e··53-SI-7(1).··-·N | ||
| 0003bbc0:· | 0003bbc0:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bbd0:· | 0003bbd0:·3629·0a20·202d·2050·4349·2d44·5353·2d52··6).··-·PCI-DSS-R | ||
| 0003bbe0:·6 | 0003bbe0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | ||
| 0003bbf0:· | 0003bbf0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | ||
| 0003bc00:· | 0003bc00:·2068·6967·685f·636f·6d70·6c65·7869·7479···high_complexity | ||
| 0003bc10:· | 0003bc10:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | ||
| 0003bc20:· | 0003bc20:·7479·0a20·202d·206d·6564·6975·6d5f·6469··ty.··-·medium_di | ||
| 0003bc30:· | 0003bc30:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | ||
| 0003bc40:· | 0003bc40:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | ||
| 0003bc50:· | 0003bc50:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | ||
| 0003bc60:· | 0003bc60:·6567·790a·2020·2d20·7270·6d5f·7665·7269··egy.··-·rpm_veri | ||
| 0003bc70:·6 | 0003bc70:·6679·5f68·6173·6865·730a·0a2d·206e·616d··fy_hashes..-·nam | ||
| 0003bc80:· | 0003bc80:·653a·2027·5365·7420·6661·6374·3a20·5061··e:·'Set·fact:·Pa | ||
| Max diff block lines reached; 10399181/10454133 bytes (99.47%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 285, 33 lines modified | Offset 304, 14 lines modified | ||
| 285 | ··-·PCI-DSSv4-11.5.2 | 304 | ··-·PCI-DSSv4-11.5.2 |
| 286 | ··-·high_complexity | 305 | ··-·high_complexity |
| 287 | ··-·high_severity | 306 | ··-·high_severity |
| 288 | ··-·medium_disruption | 307 | ··-·medium_disruption |
| 289 | ··-·no_reboot_needed | 308 | ··-·no_reboot_needed |
| 290 | ··-·restrict_strategy | 309 | ··-·restrict_strategy |
| 291 | ··-·rpm_verify_hashes | 310 | ··-·rpm_verify_hashes |
| 292 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 293 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 294 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 295 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 296 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 297 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 298 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 299 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 300 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 301 | fi | ||
| 302 | else | ||
| 303 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 304 | fi | ||
| 305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 306 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 307 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 308 | run·the·following·command·to·determine·which·package·owns·it: | 314 | run·the·following·command·to·determine·which·package·owns·it: |
| 309 | $·rpm·-qf·FILENAME | 315 | $·rpm·-qf·FILENAME |
| 310 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 311 | $·sudo·rpm·--restore·PACKAGENAME | 317 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 445, 46 lines modified | Offset 477, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 446 | ··-·high_complexity | 478 | ··-·high_complexity |
| 447 | ··-·high_severity | 479 | ··-·high_severity |
| 448 | ··-·medium_disruption | 480 | ··-·medium_disruption |
| 449 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 450 | ··-·restrict_strategy | 482 | ··-·restrict_strategy |
| 451 | ··-·rpm_verify_ownership | 483 | ··-·rpm_verify_ownership |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1006767/1014478 bytes (99.24%) of diff not shown. | |||
| Offset 15168, 408 lines modified | Offset 15168, 408 lines modified | ||
| 0003b3f0:·2d74·6172·6765·743d·2223·6964·6d34·3736··-target="#idm476 | 0003b3f0:·2d74·6172·6765·743d·2223·6964·6d34·3736··-target="#idm476 | ||
| 0003b400:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b400:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b410:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b410:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b420:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b420:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b430:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b430:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b440:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b440:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b450:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b450:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b460:·7469·6f6e·20 | 0003b460:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b470:·7 | 0003b470:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b480:· | 0003b480:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b490:·6 | 0003b490:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b4a0:· | 0003b4a0:·2220·6964·3d22·6964·6d34·3736·3222·3e3c··"·id="idm4762">< | ||
| 0003b4b0:·2 | 0003b4b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b4c0:· | 0003b4c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b4d0:· | 0003b4d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b4e0:· | 0003b4e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b4f0:·6 | 0003b4f0:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b500:· | 0003b500:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b510:· | 0003b510:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b520:·7 | 0003b520:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b530:· | 0003b530:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b540:·3 | 0003b540:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b550:· | 0003b550:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b560:· | 0003b560:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b570:· | 0003b570:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b580:·7 | 0003b580:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b590:· | 0003b590:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b5a0:·6 | 0003b5a0:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b5b0:· | 0003b5b0:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b5c0:·6 | 0003b5c0:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b5d0:· | 0003b5d0:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b5e0:· | 0003b5e0:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b5f0:· | 0003b5f0:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b600:· | 0003b600:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b610:·2 | 0003b610:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b620:· | 0003b620:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b630:·3 | 0003b630:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b640:· | 0003b640:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b650:·2 | 0003b650:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b660:· | 0003b660:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b670:· | 0003b670:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b680:· | 0003b680:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b690:· | 0003b690:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b6a0:· | 0003b6a0:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b6b0:· | 0003b6b0:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b6c0:· | 0003b6c0:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b6d0:·2 | 0003b6d0:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003b6e0:· | 0003b6e0:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003b6f0:· | 0003b6f0:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003b700:·6 | 0003b700:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003b710:· | 0003b710:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003b720:·6 | 0003b720:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003b730:·2 | 0003b730:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003b740:·6 | 0003b740:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003b750:· | 0003b750:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003b760:· | 0003b760:·2020·2020·0a20·2020·2064·6e66·2072·6569······.····dnf·rei | ||
| 0003b770:· | 0003b770:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | ||
| 0003b780:·6 | 0003b780:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b790:· | 0003b790:·0a20·2020·200a·6669·0a0a·656c·7365·0a20··.····.fi..else.· | ||
| 0003b7a0:· | 0003b7a0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003b7b0:· | 0003b7b0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003b7c0:·6 | 0003b7c0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003b7d0:· | 0003b7d0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003b7e0:·6 | 0003b7e0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003b7f0:·2 | 0003b7f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b800:· | 0003b800:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b810:· | 0003b810:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b820:· | 0003b820:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b830:·61 | 0003b830:·612d·7461·7267·6574·3d22·2369·646d·3437··a-target="#idm47 | ||
| 0003b840:·63 | 0003b840:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | ||
| 0003b850:· | 0003b850:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b860:· | 0003b860:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b870:· | 0003b870:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b880:· | 0003b880:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b890:·6 | 0003b890:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b8a0:·6 | 0003b8a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b8b0:· | 0003b8b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b8c0:· | 0003b8c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b8d0:· | 0003b8d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b8e0:· | 0003b8e0:·6170·7365·2220·6964·3d22·6964·6d34·3736··apse"·id="idm476 | ||
| 0003b8f0:· | 0003b8f0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | ||
| 0003b900:· | 0003b900:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003b910:· | 0003b910:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003b920:· | 0003b920:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003b930:· | 0003b930:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003b940:· | 0003b940:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b950:· | 0003b950:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003b960:· | 0003b960:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b970:· | 0003b970:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003b980:· | 0003b980:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003b990:· | 0003b990:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003b9a0:· | 0003b9a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003b9b0:· | 0003b9b0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003b9c0:· | 0003b9c0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003b9d0:· | 0003b9d0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003b9e0:· | 0003b9e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003b9f0:· | 0003b9f0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003ba00:· | 0003ba00:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003ba10:· | 0003ba10:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003ba20:· | 0003ba20:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003ba30:·6 | 0003ba30:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003ba40:· | 0003ba40:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003ba50:· | 0003ba50:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003ba60:· | 0003ba60:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003ba70:· | 0003ba70:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003ba80:· | 0003ba80:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003ba90:· | 0003ba90:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003baa0:· | 0003baa0:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003bab0:· | 0003bab0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bac0:· | 0003bac0:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003bad0:· | 0003bad0:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003bae0:· | 0003bae0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003baf0:·2 | 0003baf0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb00:· | 0003bb00:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003bb10:· | 0003bb10:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003bb20:· | 0003bb20:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003bb30:· | 0003bb30:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003bb40:· | 0003bb40:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003bb50:· | 0003bb50:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003bb60:· | 0003bb60:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003bb70:· | 0003bb70:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003bb80:·6 | 0003bb80:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003bb90:· | 0003bb90:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003bba0:· | 0003bba0:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003bbb0:· | 0003bbb0:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| 0003bbc0:· | 0003bbc0:·6163·743a·2050·6163·6b61·6765·206d·616e··act:·Package·man | ||
| Max diff block lines reached; 16149951/16204903 bytes (99.66%) of diff not shown. | |||
| Offset 15070, 218 lines modified | Offset 15070, 218 lines modified | ||
| 0003add0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003add0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ade0:·2223·6964·6d35·3039·3722·2074·6162·696e··"#idm5097"·tabin | 0003ade0:·2223·6964·6d35·3039·3722·2074·6162·696e··"#idm5097"·tabin | ||
| 0003adf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003adf0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae00:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae10:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae20:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae30:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ae40:·3e52·656d·6564·6961·7469·6f6e·204 | 0003ae40:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003ae50:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003ae60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ae70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ae80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ae90:·2269·646d·3530·3937·223e·3c74·6162·6c65··"idm5097"><table | |||
| 0003aea0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003aeb0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003aec0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003aed0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003aee0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003aef0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af00:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a | 0003ae50:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003ae60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ae70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ae80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ae90:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003aea0:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003aeb0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003aec0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003aed0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003aee0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003aef0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003af00:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003af10:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003af20:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003af30:·3039·3822·2074·6162·696e·6465·783d·2230··098"·tabindex="0 | |||
| 0003af40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003af50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003af60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003af70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003af80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003af90:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003afa0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003afc0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003afd0:·6170·7365·2220·6964·3d22·6964·6d35·3039··apse"·id="idm509 | |||
| 0003afe0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003aff0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b000:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b010:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b020:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b030:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003 | 0003b040:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003af30:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003 | 0003b050:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b060:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003 | 0003b070:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b080:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b090:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0a0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0b0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0c0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b0d0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b0e0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b0f0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003af60:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003af70:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003af80:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003af90:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003afa0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003afb0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003afc0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003afd0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003afe0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003aff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b0b0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b0c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b | 0003b100:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | ||
| 0003b110:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b120:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b130:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b0e0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b0f0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b100:·2077·6865·6e3a·2028·226b·6572·6e65·6c22···when:·("kernel" | |||
| 0003b110:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b120:·732e·7061·636b·6167·6573·206f·7220·226b··s.packages·or·"k | |||
| 0003b130:·6572·6e65·6c2d·7565·6b22·2069·6e20·616e··ernel-uek"·in·an | |||
| 0003b140:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b150:·6167·6573·290a·2020·7461·6773·3a0a·2020··ages).··tags:.·· | |||
| 0003b160:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b170:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b180:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b190:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b1a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b1b0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b1c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b1d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b1e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b1f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b200:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b210:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b220:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b140:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003b | 0003b150:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003b | 0003b160:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003b | 0003b170:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003b | 0003b180:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b | 0003b190:·2369·646d·3530·3939·2220·7461·6269·6e64··#idm5099"·tabind | ||
| 0003b | 0003b1a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b | 0003b1b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b | 0003b1c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b | 0003b1d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b | 0003b1e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b | 0003b1f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b2f0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b300:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b310:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| Max diff block lines reached; 33002594/33031326 bytes (99.91%) of diff not shown. | |||
| Offset 15065, 218 lines modified | Offset 15065, 218 lines modified | ||
| 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ad90:·3d22·2369·646d·3530·3937·2220·7461·6269··="#idm5097"·tabi | 0003ad90:·3d22·2369·646d·3530·3937·2220·7461·6269··="#idm5097"·tabi | ||
| 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ae00:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ae10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae40:·3d22·6964·6d35·3039·3722·3e3c·7461·626c··="idm5097"><tabl | |||
| 0003ae50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ae60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ae70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ae80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ae90:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aea0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aeb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae | 0003ae00:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003ae10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ae20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ae30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ae40:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ae50:·3039·3722·3e3c·7072·653e·3c63·6f64·653e··097"><pre><code> | |||
| 0003ae60:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae70:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ae80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ae90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003aea0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003aeb0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003aec0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003aed0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003aee0:·3530·3938·2220·7461·6269·6e64·6578·3d22··5098"·tabindex=" | |||
| 0003aef0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003af00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003af10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003af20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003af30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003af40:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003af50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003af60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003af70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af80:·6c61·7073·6522·2069·643d·2269·646d·3530··lapse"·id="idm50 | |||
| 0003af90:·3938·223e·3c74·6162·6c65·2063·6c61·7373··98"><table·class | |||
| 0003afa0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003afb0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003afc0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003afd0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003afe0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a | 0003aff0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003aee0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003aef0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003af20:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003af30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003af40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003af50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003af60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003af70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003af80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003af90:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003afa0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003afb0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003afc0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003afd0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003afe0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003aff0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b000:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b010:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b020:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b030:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b040:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b050:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b060:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b070:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b080:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b090:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b0a0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b0b0:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b0c0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b0d0:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b0e0:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b0f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b100:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b110:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b120:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b130:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b140:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b150:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b160:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b170:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b180:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b190:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b1a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b1b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b1c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b1d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b1e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b1f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b200:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b210:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b230:·743d·2223·6964·6d35·3039·3822·2074·6162··t="#idm5098"·tab | |||
| 0003b240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b290:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b2a0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b2b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b2e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2f0:·3530·3938·223e·3c70·7265·3e3c·636f·6465··5098"><pre><code | |||
| 0003b300:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b310:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b320:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b330:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b340:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b350:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b360:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b370:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b380:·6d35·3039·3922·2074·6162·696e·6465·783d··m5099"·tabindex= | |||
| Max diff block lines reached; 32917565/32946297 bytes (99.91%) of diff not shown. | |||
| Offset 15059, 221 lines modified | Offset 15059, 221 lines modified | ||
| 0003ad20:·6765·743d·2223·6964·6d35·3635·3122·2074··get="#idm5651"·t | 0003ad20:·6765·743d·2223·6964·6d35·3635·3122·2074··get="#idm5651"·t | ||
| 0003ad30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad30:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad40:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad50:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad60:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad70:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad80:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ad90:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ada0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003adc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ad | 0003ad90:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003ada0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003adb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003adc0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003add0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ade0:·646d·3536·3531·223e·3c70·7265·3e3c·636f··dm5651"><pre><co | |||
| 0003adf0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae00:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae10:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ae20:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a | 0003ae30:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003adf0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae30:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae | 0003ae40:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003ae50:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ae60:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ae70:·6964·6d35·3635·3222·2074·6162·696e·6465··idm5652"·tabinde | |||
| 0003ae80:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ae90:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aea0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aeb0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003aec0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aed0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003aee0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003aef0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af00:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003af10:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003af20:·6d35·3635·3222·3e3c·7461·626c·6520·636c··m5652"><table·cl | |||
| 0003af30:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af40:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003af50:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003af60:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003af70:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a | 0003af80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003af90:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003ae70:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003ae80:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003ae90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aea0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aeb0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003aec0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aed0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003aee0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003aef0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003af00:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003af10:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003af20:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003af30:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003af40:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 0003af50:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003af60:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003af70:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003af80:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003af90:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003afa0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003afb0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003afc0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003afd0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003afe0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003aff0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b000:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b010:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b020:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b030:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b040:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b050:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b060:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b070:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b080:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b090:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b0a0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b0b0:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b0c0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b0d0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b0e0:·4c30·372d·3030·2d30·3230·3032·390a·2020··L07-00-020029.·· | |||
| 0003b0f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b100:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b110:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b120:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b130:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b140:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b150:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b160:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b170:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b180:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b190:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b1a0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b1b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b1c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b200:·2369·646d·3536·3532·2220·7461·6269·6e64··#idm5652"·tabind | |||
| 0003b210:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b220:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b230:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b240:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b250:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b260:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b270:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b280:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b290:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b2a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b2b0:·6170·7365·2220·6964·3d22·6964·6d35·3635··apse"·id="idm565 | |||
| 0003b2c0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003b2d0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b2e0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b2f0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b300:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b310:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b320:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b330:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| Max diff block lines reached; 21436334/21465480 bytes (99.86%) of diff not shown. | |||
| Offset 15065, 221 lines modified | Offset 15065, 221 lines modified | ||
| 0003ad80:·7461·7267·6574·3d22·2369·646d·3536·3531··target="#idm5651 | 0003ad80:·7461·7267·6574·3d22·2369·646d·3536·3531··target="#idm5651 | ||
| 0003ad90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ad90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ada0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ada0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003adb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003adb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003adc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003adc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003add0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003add0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ade0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ade0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003adf0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ae00:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ae10:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ae20:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003a | 0003adf0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003ae00:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ae10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae40:·3d22·6964·6d35·3635·3122·3e3c·7072·653e··="idm5651"><pre> | |||
| 0003ae50:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ae60:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ae70:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ae80:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ae | 0003ae90:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003ae50:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ae60:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ae70:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ae80:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ae90:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003aea0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ae | 0003aea0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003aeb0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003aec0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003aed0:·3d22·2369·646d·3536·3532·2220·7461·6269··="#idm5652"·tabi | |||
| 0003aee0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003aef0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003af00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003af10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003af20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003af30:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003af40:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003af50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003af60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003af70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003af80:·2269·646d·3536·3532·223e·3c74·6162·6c65··"idm5652"><table | |||
| 0003af90:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003afa0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003afb0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003afc0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003afd0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a | 0003afe0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003a | 0003aff0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b000:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003aee0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003aef0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003af00:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003af10:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003af20:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003af30:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003af40:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003af50:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003af60:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003af70:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003af80:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003af90:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003afa0:·5354·4947·2d4f·4c30·372d·3030·2d30·3230··STIG-OL07-00-020 | |||
| 0003afb0:·3032·390a·2020·2d20·4e49·5354·2d38·3030··029.··-·NIST-800 | |||
| 0003afc0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003afd0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003afe0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003aff0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b000:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b010:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b020:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b030:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b040:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b050:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b060:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b070:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b080:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b090:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b0a0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b0b0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b0c0:·6e74·0a20·2077·6865·6e3a·2028·226b·6572··nt.··when:·("ker | |||
| 0003b0d0:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003b0e0:·6661·6374·732e·7061·636b·6167·6573·206f··facts.packages·o | |||
| 0003b0f0:·7220·226b·6572·6e65·6c2d·7565·6b22·2069··r·"kernel-uek"·i | |||
| 0003b100:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b110:·7061·636b·6167·6573·290a·2020·7461·6773··packages).··tags | |||
| 0003b120:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b130:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b140:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 0003b150:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b160:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b170:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b180:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b190:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b1a0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b1b0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b1c0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b1d0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b1e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b1f0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b200:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b210:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b220:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b230:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b240:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b250:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b260:·743d·2223·6964·6d35·3635·3222·2074·6162··t="#idm5652"·tab | |||
| 0003b270:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b280:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b290:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b2a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2c0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b2d0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b2e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b300:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b310:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b320:·3536·3532·223e·3c70·7265·3e3c·636f·6465··5652"><pre><code | |||
| 0003b330:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b340:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b350:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b360:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b370:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b380:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b390:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| Max diff block lines reached; 21774262/21803408 bytes (99.87%) of diff not shown. | |||
| Offset 15050, 221 lines modified | Offset 15050, 221 lines modified | ||
| 0003ac90:·7267·6574·3d22·2369·646d·3536·3531·2220··rget="#idm5651"· | 0003ac90:·7267·6574·3d22·2369·646d·3536·3531·2220··rget="#idm5651"· | ||
| 0003aca0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003aca0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003acb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003acb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003acc0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003acc0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003acd0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003acd0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ace0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003ace0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003acf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003acf0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ad00:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003ad10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ad20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ad30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ad40:·2220·6964·3d22·6964·6d35·3635·3122·3e3c··"·id="idm5651">< | |||
| 0003ad50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003ad60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003ad70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003ad80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003ad90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003ada0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003adb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ad | 0003ad00:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003ad10:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003ad20:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ad30:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ad40:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003ad50:·6964·6d35·3635·3122·3e3c·7072·653e·3c63··idm5651"><pre><c | |||
| 0003ad60:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003ad70:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003ad80:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003ad90:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ada0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003adb0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003adc0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003add0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003ade0:·2369·646d·3536·3532·2220·7461·6269·6e64··#idm5652"·tabind | |||
| 0003adf0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ae00:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ae10:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ae20:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ae30:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ae40:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003ae50:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003ae60:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae70:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae80:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae90:·646d·3536·3532·223e·3c74·6162·6c65·2063··dm5652"><table·c | |||
| 0003aea0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003aeb0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003aec0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003aed0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003aee0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003a | 0003aef0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a | 0003af00:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003adf0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003ae00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003ae10:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003ae20:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003ae30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003ae40:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003ae50:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003ae60:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003ae70:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003ae80:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003ae90:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003aea0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003aeb0:·4947·2d4f·4c30·372d·3030·2d30·3230·3032··IG-OL07-00-02002 | |||
| 0003aec0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003aed0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003aee0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003af00:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003af10:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003af20:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003af30:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003af40:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003af50:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003af60:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003af70:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003af80:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003af90:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003afa0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003afb0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003afc0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003afd0:·0a20·2077·6865·6e3a·2028·226b·6572·6e65··.··when:·("kerne | |||
| 0003afe0:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003aff0:·6374·732e·7061·636b·6167·6573·206f·7220··cts.packages·or· | |||
| 0003b000:·226b·6572·6e65·6c2d·7565·6b22·2069·6e20··"kernel-uek"·in· | |||
| 0003b010:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b020:·636b·6167·6573·290a·2020·7461·6773·3a0a··ckages).··tags:. | |||
| 0003b030:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b040:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b050:·4f4c·3037·2d30·302d·3032·3030·3239·0a20··OL07-00-020029.· | |||
| 0003b060:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b070:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b080:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b090:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b0a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b0b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b0c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b0d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b0e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b0f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b100:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b110:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b120:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b130:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b140:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b150:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b170:·2223·6964·6d35·3635·3222·2074·6162·696e··"#idm5652"·tabin | |||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b1e0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b1f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b200:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b210:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b220:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003b230:·3532·223e·3c70·7265·3e3c·636f·6465·3e0a··52"><pre><code>. | |||
| 0003b240:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b250:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b260:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b270:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b280:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b290:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| Max diff block lines reached; 9698257/9727403 bytes (99.70%) of diff not shown. | |||
| Offset 114, 14 lines modified | Offset 114, 53 lines modified | ||
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 143 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 144 | ····yum·install·-y·"aide" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 161 | ··package_facts: |
| Offset 152, 53 lines modified | Offset 191, 14 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 191 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 192 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 193 | ··-·low_complexity |
| 155 | ··-·low_disruption | 194 | ··-·low_disruption |
| 156 | ··-·medium_severity | 195 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 196 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 197 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 169 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 170 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 171 | ····yum·install·-y·"aide" | ||
| 172 | fi | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | package·--add=aide | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 202 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 203 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 204 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 224, 14 lines modified | Offset 224, 28 lines modified | ||
| 224 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 224 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 225 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 226 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 226 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 227 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 227 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 229 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule | 230 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r958944_rule |
| 231 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 232 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 233 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 234 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 235 | ····yum·install·-y·"aide" | ||
| 236 | fi | ||
| 237 | /usr/sbin/aide·--init | ||
| 238 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 239 | else | ||
| Max diff block lines reached; 1037334/1042345 bytes (99.52%) of diff not shown. | |||
| Offset 14918, 205 lines modified | Offset 14918, 205 lines modified | ||
| 0003a450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a450:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a460:·3d22·2369·646d·3130·3332·3622·2074·6162··="#idm10326"·tab | 0003a460:·3d22·2369·646d·3130·3332·3622·2074·6162··="#idm10326"·tab | ||
| 0003a470:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a470:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a480:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a480:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a490:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a490:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a4a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a4a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a4b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a4b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a4c0:·2122·3e52·656d·6564·6961·7469·6f6e·20 | 0003a4c0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0003a4d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003a4e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a4f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a500:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a510:·643d·2269·646d·3130·3332·3622·3e3c·7461··d="idm10326"><ta | |||
| 0003a520:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a530:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a540:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a550:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a560:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a | 0003a4d0:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0003a4e0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a4f0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a500:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a510:·6964·6d31·3033·3236·223e·3c70·7265·3e3c··idm10326"><pre>< | |||
| 0003a520:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | |||
| 0003a530:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | |||
| 0003a540:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | |||
| 0003a550:·2070·6c61·7466·6f72·6d73·0a69·6620·7270···platforms.if·rp | |||
| 0003a560:·6d20·2d2d·7175·6965·7420·2d71·2079·756d··m·--quiet·-q·yum | |||
| 0003a570:·3b20·7468·656e·0a0a·2320·5374·7269·7020··;·then..#·Strip· | |||
| 0003a580:·616e·7920·7365·6172·6368·2063·6861·7261··any·search·chara | |||
| 0003a590:·6374·6572·7320·696e·2074·6865·206b·6579··cters·in·the·key | |||
| 0003a5a0:·2061·7267·2073·6f20·7468·6174·2074·6865···arg·so·that·the | |||
| 0003a5b0:·206b·6579·2063·616e·2062·6520·7265·706c···key·can·be·repl | |||
| 0003a5c0:·6163·6564·2077·6974·686f·7574·0a23·2061··aced·without.#·a | |||
| 0003a5d0:·6464·696e·6720·616e·7920·7365·6172·6368··dding·any·search | |||
| 0003a5e0:·2063·6861·7261·6374·6572·7320·746f·2074···characters·to·t | |||
| 0003a5f0:·6865·2063·6f6e·6669·6720·6669·6c65·2e0a··he·config·file.. | |||
| 0003a600:·7374·7269·7070·6564·5f6b·6579·3d24·2873··stripped_key=$(s | |||
| 0003a610:·6564·2027·732f·5b5c·5e3d·5c24·2c3b·2b5d··ed·'s/[\^=\$,;+] | |||
| 0003a620:·2a2f·2f67·2720·266c·743b·266c·743b·266c··*//g'·<<&l | |||
| 0003a630:·743b·2022·5e67·7067·6368·6563·6b22·290a··t;·"^gpgcheck"). | |||
| 0003a640:·0a23·2073·6865·6c6c·6368·6563·6b20·6469··.#·shellcheck·di | |||
| 0003a650:·7361·626c·653d·5343·3230·3539·0a70·7269··sable=SC2059.pri | |||
| 0003a660:·6e74·6620·2d76·2066·6f72·6d61·7474·6564··ntf·-v·formatted | |||
| 0003a670:·5f6f·7574·7075·7420·2225·7320·3d20·2573··_output·"%s·=·%s | |||
| 0003a680:·2220·2224·7374·7269·7070·6564·5f6b·6579··"·"$stripped_key | |||
| 0003a690:·2220·2231·220a·0a23·2049·6620·7468·6520··"·"1"..#·If·the· | |||
| 0003a6a0:·6b65·7920·6578·6973·7473·2c20·6368·616e··key·exists,·chan | |||
| 0003a6b0:·6765·2069·742e·204f·7468·6572·7769·7365··ge·it.·Otherwise | |||
| 0003a6c0:·2c20·6164·6420·6974·2074·6f20·7468·6520··,·add·it·to·the· | |||
| 0003a6d0:·636f·6e66·6967·5f66·696c·652e·0a23·2057··config_file..#·W | |||
| 0003a6e0:·6520·7365·6172·6368·2066·6f72·2074·6865··e·search·for·the | |||
| 0003a6f0:·206b·6579·2073·7472·696e·6720·666f·6c6c···key·string·foll | |||
| 0003a700:·6f77·6564·2062·7920·6120·776f·7264·2062··owed·by·a·word·b | |||
| 0003a710:·6f75·6e64·6172·7920·286d·6174·6368·6564··oundary·(matched | |||
| 0003a720:·2062·7920·5c26·6774·3b29·2c0a·2320·736f···by·\>),.#·so | |||
| 0003a730:·2069·6620·7765·2073·6561·7263·6820·666f···if·we·search·fo | |||
| 0003a740:·7220·2773·6574·7469·6e67·272c·2027·7365··r·'setting',·'se | |||
| 0003a750:·7474·696e·6732·2720·776f·6e27·7420·6d61··tting2'·won't·ma | |||
| 0003a760:·7463·682e·0a69·6620·4c43·5f41·4c4c·3d43··tch..if·LC_ALL=C | |||
| 0003a770:·2067·7265·7020·2d71·202d·6d20·3120·2d69···grep·-q·-m·1·-i | |||
| 0003a780:·202d·6520·225e·6770·6763·6865·636b·5c5c···-e·"^gpgcheck\\ | |||
| 0003a790:·2667·743b·2220·222f·6574·632f·7975·6d2e··>"·"/etc/yum. | |||
| 0003a7a0:·636f·6e66·223b·2074·6865·6e0a·2020·2020··conf";·then.···· | |||
| 0003a7b0:·6573·6361·7065·645f·666f·726d·6174·7465··escaped_formatte | |||
| 0003a7c0:·645f·6f75·7470·7574·3d24·2873·6564·202d··d_output=$(sed·- | |||
| 0003a7d0:·6520·2773·7c2f·7c5c·5c2f·7c67·2720·266c··e·'s|/|\\/|g'·&l | |||
| 0003a7e0:·743b·266c·743b·266c·743b·2022·2466·6f72··t;<<·"$for | |||
| 0003a7f0:·6d61·7474·6564·5f6f·7574·7075·7422·290a··matted_output"). | |||
| 0003a800:·2020·2020·4c43·5f41·4c4c·3d43·2073·6564······LC_ALL=C·sed | |||
| 0003a810:·202d·6920·2d2d·666f·6c6c·6f77·2d73·796d···-i·--follow-sym | |||
| 0003a820:·6c69·6e6b·7320·2273·2f5e·6770·6763·6865··links·"s/^gpgche | |||
| 0003a830:·636b·5c5c·2667·743b·2e2a·2f24·6573·6361··ck\\>.*/$esca | |||
| 0003a840:·7065·645f·666f·726d·6174·7465·645f·6f75··ped_formatted_ou | |||
| 0003a850:·7470·7574·2f67·6922·2022·2f65·7463·2f79··tput/gi"·"/etc/y | |||
| 0003a860:·756d·2e63·6f6e·6622·0a65·6c73·650a·2020··um.conf".else.·· | |||
| 0003a870:·2020·6966·205b·5b20·2d73·2022·2f65·7463····if·[[·-s·"/etc | |||
| 0003a880:·2f79·756d·2e63·6f6e·6622·205d·5d20·2661··/yum.conf"·]]·&a | |||
| 0003a890:·6d70·3b26·616d·703b·205b·5b20·2d6e·2022··mp;&·[[·-n·" | |||
| 0003a8a0:·2428·7461·696c·202d·6320·3120·2d2d·2022··$(tail·-c·1·--·" | |||
| 0003a8b0:·2f65·7463·2f79·756d·2e63·6f6e·6622·207c··/etc/yum.conf"·| | |||
| 0003a8c0:·7c20·7472·7565·2922·205d·5d3b·2074·6865··|·true)"·]];·the | |||
| 0003a8d0:·6e0a·2020·2020·2020·2020·4c43·5f41·4c4c··n.········LC_ALL | |||
| 0003a8e0:·3d43·2073·6564·202d·6920·2d2d·666f·6c6c··=C·sed·-i·--foll | |||
| 0003a8f0:·6f77·2d73·796d·6c69·6e6b·7320·2724·6127··ow-symlinks·'$a' | |||
| 0003a900:·5c5c·2022·2f65·7463·2f79·756d·2e63·6f6e··\\·"/etc/yum.con | |||
| 0003a910:·6622·0a20·2020·2066·690a·2020·2020·7072··f".····fi.····pr | |||
| 0003a920:·696e·7466·2027·2573·5c6e·2720·2224·666f··intf·'%s\n'·"$fo | |||
| 0003a930:·726d·6174·7465·645f·6f75·7470·7574·2220··rmatted_output"· | |||
| 0003a940:·2667·743b·2667·743b·2022·2f65·7463·2f79··>>·"/etc/y | |||
| 0003a950:·756d·2e63·6f6e·6622·0a66·690a·0a65·6c73··um.conf".fi..els | |||
| 0003a960:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | |||
| 0003a970:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | |||
| 0003a980:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | |||
| 0003a990:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | |||
| 0003a9a0:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | |||
| 0003a9b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003a9c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003a9d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003a9e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003a9f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003aa00:·6d31·3033·3237·2220·7461·6269·6e64·6578··m10327"·tabindex | |||
| 0003aa10:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003aa20:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003aa30:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003aa40:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003aa50:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003aa60:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003aa70:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003aa80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aa90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003aaa0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003aab0:·6d31·3033·3237·223e·3c74·6162·6c65·2063··m10327"><table·c | |||
| 0003aac0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003aad0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003aae0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003aaf0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ab00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ab10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ab20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ab30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003ab40:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003ab50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ab60:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003a | 0003ab70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003ab80:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ab90:·636f·6e66·6967·7572·653c·2f74·643e·3c2f··configure</td></ | |||
| Max diff block lines reached; 3488116/3515054 bytes (99.23%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 42 lines modified | ||
| 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 111 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020050 |
| 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 115 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r1015187_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221710r1015187_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·rpm·--quiet·-q·yum;·then | ||
| 121 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 122 | #·adding·any·search·characters·to·the·config·file. | ||
| 123 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 124 | #·shellcheck·disable=SC2059 | ||
| 125 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 126 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 127 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 128 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 129 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 130 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 131 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 132 | yum.conf" | ||
| 133 | else | ||
| 134 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 135 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 136 | ····fi | ||
| 137 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 123 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 148 | ··package_facts: |
| Offset 173, 42 lines modified | Offset 201, 14 lines modified | ||
| 173 | ··-·PCI-DSSv4-6.3.3 | 201 | ··-·PCI-DSSv4-6.3.3 |
| 174 | ··-·configure_strategy | 202 | ··-·configure_strategy |
| 175 | ··-·ensure_gpgcheck_globally_activated | 203 | ··-·ensure_gpgcheck_globally_activated |
| 176 | ··-·high_severity | 204 | ··-·high_severity |
| 177 | ··-·low_complexity | 205 | ··-·low_complexity |
| 178 | ··-·medium_disruption | 206 | ··-·medium_disruption |
| 179 | ··-·no_reboot_needed | 207 | ··-·no_reboot_needed |
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·yum;·then | ||
| 183 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 184 | #·adding·any·search·characters·to·the·config·file. | ||
| 185 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^gpgcheck") | ||
| 186 | #·shellcheck·disable=SC2059 | ||
| 187 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 188 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 189 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 190 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 191 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 192 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 193 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^gpgcheck\\>.*/$escaped_formatted_output/gi"·"/etc/ | ||
| 194 | yum.conf" | ||
| 195 | else | ||
| 196 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 197 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 198 | ····fi | ||
| 199 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 200 | fi | ||
| 201 | else | ||
| 202 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 203 | fi | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·f\x8fo\x8or\x8r·L\x8Lo\x8oc\x8ca\x8al\x8l·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. | 209 | yum·should·be·configured·to·verify·the·signature(s)·of·local·packages·prior·to·installation. |
| 206 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ | 210 | To·configure·yum·to·verify·signatures·of·local·packages,·set·the·localpkg_gpgcheck·to·1·in·/ |
| 207 | etc/yum.conf. | 211 | etc/yum.conf. |
| 208 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall | 212 | ············Changes·to·any·software·components·can·have·significant·effects·to·the·overall |
| 209 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not | 213 | ············security·of·the·operating·system.·This·requirement·ensures·the·software·has·not |
| 210 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. | 214 | ············been·tampered·and·has·been·provided·by·a·trusted·vendor. |
| Offset 230, 14 lines modified | Offset 230, 42 lines modified | ||
| 230 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) | 230 | ············_\x8n_\x8i_\x8s_\x8t···········CM-11(a),·CM-11(b),·CM-6(a),·CM-5(3),·SA-12,·SA-12(10) |
| 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 231 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 232 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 232 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 233 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 | 234 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020060 |
| 235 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 235 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| 236 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r1015188_rule | 236 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221711r1015188_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·yum;·then | ||
| 240 | #·Strip·any·search·characters·in·the·key·arg·so·that·the·key·can·be·replaced·without | ||
| 241 | #·adding·any·search·characters·to·the·config·file. | ||
| 242 | stripped_key=$(sed·'s/[\^=\$,;+]*//g'·<<<·"^localpkg_gpgcheck") | ||
| 243 | #·shellcheck·disable=SC2059 | ||
| 244 | printf·-v·formatted_output·"%s·=·%s"·"$stripped_key"·"1" | ||
| 245 | #·If·the·key·exists,·change·it.·Otherwise,·add·it·to·the·config_file. | ||
| 246 | #·We·search·for·the·key·string·followed·by·a·word·boundary·(matched·by·\>), | ||
| 247 | #·so·if·we·search·for·'setting',·'setting2'·won't·match. | ||
| 248 | if·LC_ALL=C·grep·-q·-m·1·-i·-e·"^localpkg_gpgcheck\\>"·"/etc/yum.conf";·then | ||
| 249 | ····escaped_formatted_output=$(sed·-e·'s|/|\\/|g'·<<<·"$formatted_output") | ||
| 250 | ····LC_ALL=C·sed·-i·--follow-symlinks·"s/^localpkg_gpgcheck\\>.*/$escaped_formatted_output/ | ||
| 251 | gi"·"/etc/yum.conf" | ||
| 252 | else | ||
| 253 | ····if·[[·-s·"/etc/yum.conf"·]]·&&·[[·-n·"$(tail·-c·1·--·"/etc/yum.conf"·||·true)"·]];·then | ||
| 254 | ········LC_ALL=C·sed·-i·--follow-symlinks·'$a'\\·"/etc/yum.conf" | ||
| 255 | ····fi | ||
| 256 | ····printf·'%s\n'·"$formatted_output"·>>·"/etc/yum.conf" | ||
| 257 | fi | ||
| 258 | else | ||
| 259 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 260 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 261 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 262 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 263 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 264 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown | 265 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···unknown |
| 242 | -·name:·Gather·the·package·facts | 266 | -·name:·Gather·the·package·facts |
| Max diff block lines reached; 228839/234820 bytes (97.45%) of diff not shown. | |||
| Offset 15122, 419 lines modified | Offset 15122, 419 lines modified | ||
| 0003b110:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b110:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b120:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | 0003b120:·3130·2220·7461·6269·6e64·6578·3d22·3022··10"·tabindex="0" | ||
| 0003b130:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b130:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b140:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b140:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b150:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b150:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b160:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b160:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b170:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b170:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b180:·6174·696f·6e20· | 0003b180:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003b190:· | 0003b190:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b1a0:· | 0003b1a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b1b0:·6 | 0003b1b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b1c0:·6 | 0003b1c0:·6522·2069·643d·2269·646d·3533·3130·223e··e"·id="idm5310"> | ||
| 0003b1d0:·302 | 0003b1d0:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b1e0:· | 0003b1e0:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b1f0:·69 | 0003b1f0:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003b200:· | 0003b200:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003b210:· | 0003b210:·0a69·6620·2120·2820·7b20·7270·6d20·2d2d··.if·!·(·{·rpm·-- | ||
| 0003b220:·7 | 0003b220:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | ||
| 0003b230:·3 | 0003b230:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b240:·7 | 0003b240:·7270·6d20·2d2d·7175·6965·7420·2d71·2072··rpm·--quiet·-q·r | ||
| 0003b250:· | 0003b250:·706d·2d6f·7374·7265·6520·3b7d·2026·616d··pm-ostree·;}·&am | ||
| 0003b260:· | 0003b260:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b270:·7 | 0003b270:·7175·6965·7420·2d71·2062·6f6f·7463·203b··quiet·-q·bootc·; | ||
| 0003b280:·7 | 0003b280:·7d20·2661·6d70·3b26·616d·703b·207b·2021··}·&&·{·! | ||
| 0003b290:· | 0003b290:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b2a0:·6 | 0003b2a0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003b2b0:·7 | 0003b2b0:·7420·3b7d·2029·3b20·7468·656e·0a0a·2320··t·;}·);·then..#· | ||
| 0003b2c0:· | 0003b2c0:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | ||
| 0003b2d0:· | 0003b2d0:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | ||
| 0003b2e0:· | 0003b2e0:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | ||
| 0003b2f0:· | 0003b2f0:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | ||
| 0003b300:·73 | 0003b300:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | ||
| 0003b310:· | 0003b310:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | ||
| 0003b320:· | 0003b320:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | ||
| 0003b330:· | 0003b330:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | ||
| 0003b340:· | 0003b340:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b350:· | 0003b350:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | ||
| 0003b360:· | 0003b360:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | ||
| 0003b370:· | 0003b370:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | ||
| 0003b380:· | 0003b380:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | ||
| 0003b390:· | 0003b390:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | ||
| 0003b3a0:· | 0003b3a0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b3b0:· | 0003b3b0:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | ||
| 0003b3c0:·2 | 0003b3c0:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | ||
| 0003b3d0:· | 0003b3d0:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | ||
| 0003b3e0:· | 0003b3e0:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | ||
| 0003b3f0:· | 0003b3f0:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | ||
| 0003b400:· | 0003b400:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | ||
| 0003b410:· | 0003b410:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | ||
| 0003b420:· | 0003b420:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | ||
| 0003b430:· | 0003b430:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | ||
| 0003b440:·7 | 0003b440:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | ||
| 0003b450:· | 0003b450:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | ||
| 0003b460:· | 0003b460:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | ||
| 0003b470:· | 0003b470:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | ||
| 0003b480:· | 0003b480:·0a20·2020·200a·2020·2020·7975·6d20·7265··.····.····yum·re | ||
| 0003b490:· | 0003b490:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | ||
| 0003b4a0:· | 0003b4a0:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003b4b0:· | 0003b4b0:·6c0a·2020·2020·0a66·690a·0a65·6c73·650a··l.····.fi..else. | ||
| 0003b4c0:· | 0003b4c0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | ||
| 0003b4d0:· | 0003b4d0:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | ||
| 0003b4e0:· | 0003b4e0:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | ||
| 0003b4f0:· | 0003b4f0:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | ||
| 0003b500:·6 | 0003b500:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | ||
| 0003b510:· | 0003b510:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003b520:·6c | 0003b520:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003b530:· | 0003b530:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003b540:·6 | 0003b540:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b550:· | 0003b550:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b560:· | 0003b560:·3331·3122·2074·6162·696e·6465·783d·2230··311"·tabindex="0 | ||
| 0003b570:· | 0003b570:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b580:·61 | 0003b580:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b590:·6 | 0003b590:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b5a0:·6 | 0003b5a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b5b0:· | 0003b5b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b5c0:· | 0003b5c0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003b5d0:· | 0003b5d0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003b5e0:· | 0003b5e0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b5f0:·6e | 0003b5f0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b600:·6 | 0003b600:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | ||
| 0003b610:· | 0003b610:·3131·223e·3c74·6162·6c65·2063·6c61·7373··11"><table·class | ||
| 0003b620:· | 0003b620:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003b630:· | 0003b630:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b640:· | 0003b640:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003b650:· | 0003b650:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003b660:· | 0003b660:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003b670:· | 0003b670:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003b680:· | 0003b680:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b690:· | 0003b690:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003b6a0:· | 0003b6a0:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003b6b0:· | 0003b6b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b6c0:· | 0003b6c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b6d0:· | 0003b6d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b6e0:· | 0003b6e0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003b6f0:· | 0003b6f0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003b700:· | 0003b700:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003b710:· | 0003b710:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003b720:·2 | 0003b720:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003b730:· | 0003b730:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003b740:· | 0003b740:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003b750:·2 | 0003b750:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003b760:· | 0003b760:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003b770:· | 0003b770:·2020·2d20·4449·5341·2d53·5449·472d·4f4c····-·DISA-STIG-OL | ||
| 0003b780:· | 0003b780:·3037·2d30·302d·3031·3030·3230·0a20·202d··07-00-010020.··- | ||
| 0003b790:·20 | 0003b790:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003b7a0:· | 0003b7a0:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003b7b0:· | 0003b7b0:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003b7c0:· | 0003b7c0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003b7d0:·0a2 | 0003b7d0:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003b7e0:· | 0003b7e0:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003b7f0:· | 0003b7f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003b800:·6 | 0003b800:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003b810:· | 0003b810:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003b820:· | 0003b820:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003b830:· | 0003b830:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003b840:· | 0003b840:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003b850:· | 0003b850:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003b860:·20 | 0003b860:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003b870:· | 0003b870:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003b880:·6 | 0003b880:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003b890:· | 0003b890:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003b8a0:· | 0003b8a0:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003b8b0:·2 | 0003b8b0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003b8c0:·6 | 0003b8c0:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003b8d0:·7 | 0003b8d0:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003b8e0:· | 0003b8e0:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| Max diff block lines reached; 8837832/8894302 bytes (99.37%) of diff not shown. | |||
| Offset 98, 14 lines modified | Offset 98, 33 lines modified | ||
| 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 98 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 99 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 101 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 102 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 106 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 107 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 108 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 109 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 110 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 111 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 112 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 113 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 114 | fi | ||
| 115 | else | ||
| 116 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 117 | fi | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 110 | -·name:·Gather·the·package·facts | 123 | -·name:·Gather·the·package·facts |
| 111 | ··package_facts: | 124 | ··package_facts: |
| Offset 278, 33 lines modified | Offset 297, 14 lines modified | ||
| 278 | ··-·PCI-DSSv4-11.5.2 | 297 | ··-·PCI-DSSv4-11.5.2 |
| 279 | ··-·high_complexity | 298 | ··-·high_complexity |
| 280 | ··-·high_severity | 299 | ··-·high_severity |
| 281 | ··-·medium_disruption | 300 | ··-·medium_disruption |
| 282 | ··-·no_reboot_needed | 301 | ··-·no_reboot_needed |
| 283 | ··-·restrict_strategy | 302 | ··-·restrict_strategy |
| 284 | ··-·rpm_verify_hashes | 303 | ··-·rpm_verify_hashes |
| 285 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 286 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 287 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 288 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 289 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 290 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 291 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 292 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 293 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 294 | fi | ||
| 295 | else | ||
| 296 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 297 | fi | ||
| 298 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 299 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 305 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 300 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 306 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 301 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 307 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 302 | $·rpm·-qf·FILENAME | 308 | $·rpm·-qf·FILENAME |
| 303 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 327, 14 lines modified | Offset 327, 50 lines modified | ||
| 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 331 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 331 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 333 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 333 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 339 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 340 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 341 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 342 | declare·-A·SETPERMS_RPM_DICT | ||
| 343 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 344 | #·is·expected·by·the·RPM·database | ||
| 345 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 346 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 347 | do | ||
| 348 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 349 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 350 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 351 | ········do | ||
| 352 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | ········done | ||
| 355 | done | ||
| 356 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 357 | #·correct·values | ||
| 358 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 359 | do | ||
| 360 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 361 | done | ||
| 362 | else | ||
| 363 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 364 | fi | ||
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 335 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 336 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 337 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 338 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 339 | -·name:·Gather·the·package·facts | 370 | -·name:·Gather·the·package·facts |
| 340 | ··package_facts: | 371 | ··package_facts: |
| Offset 450, 50 lines modified | Offset 486, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 486 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 487 | ··-·high_complexity |
| 452 | ··-·high_severity | 488 | ··-·high_severity |
| 453 | ··-·medium_disruption | 489 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 490 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 491 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_permissions | 492 | ··-·rpm_verify_permissions |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 863179/870749 bytes (99.13%) of diff not shown. | |||
| Offset 15071, 246 lines modified | Offset 15071, 246 lines modified | ||
| 0003ade0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ade0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003adf0:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | 0003adf0:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | ||
| 0003ae00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ae00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ae10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ae10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ae20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ae20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ae30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ae30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ae40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ae40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ae50:·656d·6564·6961·7469·6f6e·204 | 0003ae50:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003ae60:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ae70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aea0:·7073·6522·2069·643d·2269·646d·3631·3833··pse"·id="idm6183 | |||
| 0003aeb0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003aec0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003aed0:·3d20·2264·7261·6375·742d·6669·7073·220a··=·"dracut-fips". | |||
| 0003aee0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003aef0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003af00:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003af10:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003af20:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003af30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003af40:·2369·646d·3631·3834·2220·7461·6269·6e64··#idm6184"·tabind | |||
| 0003af50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003af60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003af70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003af80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003af90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003afa0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003a | 0003afb0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003a | 0003afc0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003a | 0003afd0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003a | 0003afe0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003a | 0003aff0:·646d·3631·3834·223e·3c74·6162·6c65·2063··dm6184"><table·c | ||
| 0003 | 0003b000:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003 | 0003b010:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003 | 0003b020:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003 | 0003b030:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003 | 0003b040:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003 | 0003b050:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003 | 0003b060:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003 | 0003b070:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003 | 0003b080:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003 | 0003b090:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003 | 0003b0a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003 | 0003b0b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003b0c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003 | 0003b0d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003 | 0003b0e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b0f0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b100:·6472·6163·7574·2d66·6970·730a·0a63·6c61··dracut-fips..cla | |||
| 0003b110:·7373·2069·6e73·7461·6c6c·5f64·7261·6375··ss·install_dracu | |||
| 0003b120:·742d·6669·7073·207b·0a20·2070·6163·6b61··t-fips·{.··packa | |||
| 0003afa0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003afb0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003afc0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003afd0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003afe0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003aff0:·434a·4953·2d35·2e31·302e·312e·320a·2020··CJIS-5.10.1.2.·· | |||
| 0003b000:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003b010:·2e31·332e·3131·0a20·202d·204e·4953·542d··.13.11.··-·NIST- | |||
| 0003b020:·3830·302d·3137·312d·332e·3133·2e38·0a20··800-171-3.13.8.· | |||
| 0003b030:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b040:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003b050:·3830·302d·3533·2d49·412d·370a·2020·2d20··800-53-IA-7.··-· | |||
| 0003b060:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b070:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003b080:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003b090:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003b0a0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003b0b0:·2d35·332d·5343·2d31·330a·2020·2d20·656e··-53-SC-13.··-·en | |||
| 0003b0c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b0d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b0e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b0f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b100:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b110:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b120:·2070·6163·6b61·6765·5f64·7261·6375·742d···package_dracut- | |||
| 0003b130:·6669·7073·5f69·6e73·7461·6c6c·6564·0a0a··fips_installed.. | |||
| 0003b140:·2d20·6e61·6d65·3a20·456e·7375·7265·2064··-·name:·Ensure·d | |||
| 0003b150:·7261·6375·742d·6669·7073·2069·7320·696e··racut-fips·is·in | |||
| 0003b160:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b170:·653a·0a20·2020·206e·616d·653a·2064·7261··e:.····name:·dra | |||
| 0003b180:·6375·742d·6669·7073·0a20·2020·2073·7461··cut-fips.····sta | |||
| 0003b190:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b1a0:·656e·3a20·2820·6e6f·7420·2820·6c6f·6f6b··en:·(·not·(·look | |||
| 0003b1b0:·7570·2822·656e·7622·2c20·2263·6f6e·7461··up("env",·"conta | |||
| 0003b1c0:·696e·6572·2229·203d·3d20·2262·7772·6170··iner")·==·"bwrap | |||
| 0003b1d0:·2d6f·7362·7569·6c64·2220·2920·616e·6420··-osbuild"·)·and· | |||
| 0003b1e0:·2822·6b65·726e·656c·2220·696e·2061·6e73··("kernel"·in·ans | |||
| 0003b1f0:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b200:·6765·730a·2020·2020·6f72·2022·6b65·726e··ges.····or·"kern | |||
| 0003b210:·656c·2d75·656b·2220·696e·2061·6e73·6962··el-uek"·in·ansib | |||
| 0003b220:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b230:·7329·2029·0a20·2074·6167·733a·0a20·202d··s)·).··tags:.··- | |||
| 0003b240:·2043·4a49·532d·352e·3130·2e31·2e32·0a20···CJIS-5.10.1.2.· | |||
| 0003b250:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b260:·332e·3133·2e31·310a·2020·2d20·4e49·5354··3.13.11.··-·NIST | |||
| 0003b270:·2d38·3030·2d31·3731·2d33·2e31·332e·380a··-800-171-3.13.8. | |||
| 0003b280:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b290:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003b2a0:·2d38·3030·2d35·332d·4941·2d37·0a20·202d··-800-53-IA-7.··- | |||
| 0003b2b0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b2c0:·3132·0a20·202d·204e·4953·542d·3830·302d··12.··-·NIST-800- | |||
| 0003b2d0:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b2e0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b2f0:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b300:·302d·3533·2d53·432d·3133·0a20·202d·2065··0-53-SC-13.··-·e | |||
| 0003b310:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b320:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b330:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b340:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b350:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b360:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b370:·2d20·7061·636b·6167·655f·6472·6163·7574··-·package_dracut | |||
| 0003b380:·2d66·6970·735f·696e·7374·616c·6c65·640a··-fips_installed. | |||
| 0003b390:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b3a0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b3b0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b3c0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b3d0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b3e0:·3d22·2369·646d·3631·3834·2220·7461·6269··="#idm6184"·tabi | |||
| 0003b3f0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b400:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b410:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b420:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b430:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| Max diff block lines reached; 6464783/6482889 bytes (99.72%) of diff not shown. | |||
| Offset 99, 14 lines modified | Offset 99, 53 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dracut-fips" | ||
| 109 | version·=·"*" | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | include·install_dracut-fips | ||
| 116 | class·install_dracut-fips·{ | ||
| 117 | ··package·{·'dracut-fips': | ||
| 118 | ····ensure·=>·'installed', | ||
| 119 | ··} | ||
| 120 | } | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 127 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 128 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 129 | ····yum·install·-y·"dracut-fips" | ||
| 130 | fi | ||
| 131 | else | ||
| 132 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 133 | fi | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·--add=dracut-fips | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | -·name:·Gather·the·package·facts | 145 | -·name:·Gather·the·package·facts |
| 112 | ··package_facts: | 146 | ··package_facts: |
| Offset 146, 53 lines modified | Offset 185, 14 lines modified | ||
| 146 | ··-·NIST-800-53-SC-13 | 185 | ··-·NIST-800-53-SC-13 |
| 147 | ··-·enable_strategy | 186 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 187 | ··-·low_complexity |
| 149 | ··-·low_disruption | 188 | ··-·low_disruption |
| 150 | ··-·medium_severity | 189 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 190 | ··-·no_reboot_needed |
| 152 | ··-·package_dracut-fips_installed | 191 | ··-·package_dracut-fips_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"dracut-fips" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 164 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 165 | ····yum·install·-y·"dracut-fips" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_dracut-fips | ||
| 176 | class·install_dracut-fips·{ | ||
| 177 | ··package·{·'dracut-fips': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=dracut-fips | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 193 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 189 | $·sudo·yum·install·dracut-fips | 194 | $·sudo·yum·install·dracut-fips |
| 190 | dracut·-f | 195 | dracut·-f |
| 191 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 196 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 192 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 197 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 193 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 198 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 223, 14 lines modified | Offset 223, 83 lines modified | ||
| 223 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 223 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 224 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 224 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 225 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 225 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 226 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule | 229 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 232 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 233 | #·prelink·not·installed | ||
| 234 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 235 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 236 | ····then | ||
| 237 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 238 | ····else | ||
| 239 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 240 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| Max diff block lines reached; 721435/729657 bytes (98.87%) of diff not shown. | |||
| Offset 15153, 419 lines modified | Offset 15153, 419 lines modified | ||
| 0003b300:·7267·6574·3d22·2369·646d·3533·3130·2220··rget="#idm5310"· | 0003b300:·7267·6574·3d22·2369·646d·3533·3130·2220··rget="#idm5310"· | ||
| 0003b310:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b310:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b320:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b320:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b330:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b330:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b340:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b340:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b350:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b350:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b360:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b360:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b370:·6e20· | 0003b370:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003b380:· | 0003b380:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003b390:· | 0003b390:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003b3a0:·6 | 0003b3a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003b3b0:· | 0003b3b0:·643d·2269·646d·3533·3130·223e·3c70·7265··d="idm5310"><pre | ||
| 0003b3c0:· | 0003b3c0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003b3d0:· | 0003b3d0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003b3e0:· | 0003b3e0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003b3f0:· | 0003b3f0:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003b400:· | 0003b400:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003b410:· | 0003b410:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003b420:·6 | 0003b420:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b430:· | 0003b430:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003b440:·7 | 0003b440:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003b450:·6 | 0003b450:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b460:· | 0003b460:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003b470:·6 | 0003b470:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003b480:· | 0003b480:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003b490:· | 0003b490:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003b4a0:· | 0003b4a0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003b4b0:· | 0003b4b0:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003b4c0:·6 | 0003b4c0:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003b4d0:· | 0003b4d0:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003b4e0:· | 0003b4e0:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003b4f0:· | 0003b4f0:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003b500:· | 0003b500:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003b510:· | 0003b510:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003b520:· | 0003b520:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003b530:· | 0003b530:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003b540:·2 | 0003b540:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003b550:· | 0003b550:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003b560:· | 0003b560:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003b570:· | 0003b570:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003b580:· | 0003b580:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003b590:· | 0003b590:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b5a0:· | 0003b5a0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003b5b0:· | 0003b5b0:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003b5c0:·2 | 0003b5c0:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003b5d0:· | 0003b5d0:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003b5e0:· | 0003b5e0:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003b5f0:· | 0003b5f0:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003b600:·657 | 0003b600:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003b610:· | 0003b610:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003b620:· | 0003b620:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b630:· | 0003b630:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003b640:· | 0003b640:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003b650:· | 0003b650:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003b660:· | 0003b660:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003b670:·2 | 0003b670:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | ||
| 0003b680:·6 | 0003b680:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003b690:· | 0003b690:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003b6a0:· | 0003b6a0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003b6b0:· | 0003b6b0:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003b6c0:· | 0003b6c0:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003b6d0:· | 0003b6d0:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003b6e0:· | 0003b6e0:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003b6f0:· | 0003b6f0:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003b700:· | 0003b700:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b710:· | 0003b710:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b720:· | 0003b720:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b730:·6 | 0003b730:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b740:·6 | 0003b740:·6172·6765·743d·2223·6964·6d35·3331·3122··arget="#idm5311" | ||
| 0003b750:· | 0003b750:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b760:·6 | 0003b760:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b770:· | 0003b770:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b780:·2 | 0003b780:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b790:· | 0003b790:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7a0:·6 | 0003b7a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7b0:·6 | 0003b7b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003b7c0:·65 | 0003b7c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b7d0:· | 0003b7d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b7e0:·6 | 0003b7e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b7f0:·6 | 0003b7f0:·6522·2069·643d·2269·646d·3533·3131·223e··e"·id="idm5311"> | ||
| 0003b800:· | 0003b800:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003b810:· | 0003b810:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003b820:· | 0003b820:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b830:· | 0003b830:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003b840:·2 | 0003b840:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003b850:· | 0003b850:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003b860:· | 0003b860:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003b870:· | 0003b870:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b880:· | 0003b880:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003b890:· | 0003b890:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b8a0:· | 0003b8a0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b8b0:· | 0003b8b0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b8c0:· | 0003b8c0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b8d0:· | 0003b8d0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003b8e0:· | 0003b8e0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003b8f0:· | 0003b8f0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003b900:· | 0003b900:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003b910:· | 0003b910:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003b920:·2 | 0003b920:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003b930:· | 0003b930:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003b940:· | 0003b940:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | ||
| 0003b950:· | 0003b950:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003b960:· | 0003b960:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | ||
| 0003b970:· | 0003b970:·302d·3031·3030·3230·0a20·202d·204e·4953··0-010020.··-·NIS | ||
| 0003b980:· | 0003b980:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003b990:·2020·2d20· | 0003b990:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003b9a0:· | 0003b9a0:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003b9b0:· | 0003b9b0:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003b9c0:· | 0003b9c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003b9d0:· | 0003b9d0:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003b9e0:· | 0003b9e0:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003b9f0:· | 0003b9f0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003ba00:· | 0003ba00:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003ba10:· | 0003ba10:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003ba20:· | 0003ba20:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003ba30:· | 0003ba30:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003ba40:· | 0003ba40:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003ba50:· | 0003ba50:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003ba60:· | 0003ba60:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003ba70:· | 0003ba70:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003ba80:· | 0003ba80:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003ba90:· | 0003ba90:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003baa0:· | 0003baa0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003bab0:· | 0003bab0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003bac0:· | 0003bac0:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003bad0:·6 | 0003bad0:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| Max diff block lines reached; 6222096/6278566 bytes (99.10%) of diff not shown. | |||
| Offset 104, 14 lines modified | Offset 104, 33 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 108 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 121 | else | ||
| 122 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 123 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·Gather·the·package·facts | 129 | -·name:·Gather·the·package·facts |
| 117 | ··package_facts: | 130 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 307 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 310 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 331, 14 lines modified | Offset 331, 46 lines modified | ||
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 335 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 337 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 343 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 344 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 345 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 346 | declare·-A·SETPERMS_RPM_DICT | ||
| 347 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 348 | #·is·expected·by·the·RPM·database | ||
| 349 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 350 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 351 | do | ||
| 352 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 353 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 354 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 355 | done | ||
| 356 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 357 | #·correct·values | ||
| 358 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 359 | do | ||
| 360 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 361 | done | ||
| 362 | else | ||
| 363 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 364 | fi | ||
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 343 | -·name:·Gather·the·package·facts | 370 | -·name:·Gather·the·package·facts |
| 344 | ··package_facts: | 371 | ··package_facts: |
| Offset 450, 46 lines modified | Offset 482, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 482 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 483 | ··-·high_complexity |
| 452 | ··-·high_severity | 484 | ··-·high_severity |
| 453 | ··-·medium_disruption | 485 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 486 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 487 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_ownership | 488 | ··-·rpm_verify_ownership |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 662084/669286 bytes (98.92%) of diff not shown. | |||
| Offset 15184, 419 lines modified | Offset 15184, 419 lines modified | ||
| 0003b4f0:·2d74·6172·6765·743d·2223·6964·6d35·3331··-target="#idm531 | 0003b4f0:·2d74·6172·6765·743d·2223·6964·6d35·3331··-target="#idm531 | ||
| 0003b500:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003b500:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003b510:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b510:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b520:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b520:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b530:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b530:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b540:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b540:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b550:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b550:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b560:·7469·6f6e·20 | 0003b560:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b570:·7 | 0003b570:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b580:· | 0003b580:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b590:·6 | 0003b590:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b5a0:· | 0003b5a0:·2220·6964·3d22·6964·6d35·3331·3022·3e3c··"·id="idm5310">< | ||
| 0003b5b0:·2 | 0003b5b0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b5c0:· | 0003b5c0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b5d0:· | 0003b5d0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b5e0:· | 0003b5e0:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b5f0:·6 | 0003b5f0:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b600:· | 0003b600:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b610:· | 0003b610:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b620:·7 | 0003b620:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b630:· | 0003b630:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b640:·3 | 0003b640:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b650:· | 0003b650:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b660:· | 0003b660:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b670:· | 0003b670:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b680:·7 | 0003b680:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b690:· | 0003b690:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b6a0:·6 | 0003b6a0:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b6b0:· | 0003b6b0:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b6c0:·6 | 0003b6c0:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b6d0:· | 0003b6d0:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b6e0:· | 0003b6e0:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b6f0:· | 0003b6f0:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b700:· | 0003b700:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b710:·2 | 0003b710:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b720:· | 0003b720:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b730:· | 0003b730:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b740:· | 0003b740:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b750:· | 0003b750:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b760:· | 0003b760:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b770:· | 0003b770:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b780:· | 0003b780:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b790:· | 0003b790:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b7a0:· | 0003b7a0:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b7b0:· | 0003b7b0:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b7c0:· | 0003b7c0:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b7d0:·2 | 0003b7d0:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003b7e0:· | 0003b7e0:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003b7f0:· | 0003b7f0:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003b800:· | 0003b800:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003b810:·2020·2 | 0003b810:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003b820:·6 | 0003b820:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003b830:· | 0003b830:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003b840:· | 0003b840:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003b850:· | 0003b850:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003b860:· | 0003b860:·2020·2020·0a20·2020·2079·756d·2072·6569······.····yum·rei | ||
| 0003b870:· | 0003b870:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | ||
| 0003b880:·6 | 0003b880:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b890:· | 0003b890:·0a20·2020·200a·6669·0a0a·656c·7365·0a20··.····.fi..else.· | ||
| 0003b8a0:·20 | 0003b8a0:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003b8b0:· | 0003b8b0:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003b8c0:·6 | 0003b8c0:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003b8d0:· | 0003b8d0:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003b8e0:·6 | 0003b8e0:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003b8f0:· | 0003b8f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003b900:· | 0003b900:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003b910:·6 | 0003b910:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003b920:·6 | 0003b920:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003b930:· | 0003b930:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b940:· | 0003b940:·3131·2220·7461·6269·6e64·6578·3d22·3022··11"·tabindex="0" | ||
| 0003b950:· | 0003b950:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b960:· | 0003b960:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b970:· | 0003b970:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b980:· | 0003b980:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b990:·6 | 0003b990:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b9a0:· | 0003b9a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003b9b0:·69 | 0003b9b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003b9c0:· | 0003b9c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b9d0:· | 0003b9d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b9e0:·6 | 0003b9e0:·6170·7365·2220·6964·3d22·6964·6d35·3331··apse"·id="idm531 | ||
| 0003b9f0:· | 0003b9f0:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | ||
| 0003ba00:· | 0003ba00:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003ba10:· | 0003ba10:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003ba20:· | 0003ba20:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003ba30:· | 0003ba30:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003ba40:· | 0003ba40:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003ba50:· | 0003ba50:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003ba60:· | 0003ba60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003ba70:· | 0003ba70:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003ba80:· | 0003ba80:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003ba90:· | 0003ba90:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003baa0:· | 0003baa0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003bab0:· | 0003bab0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003bac0:·6 | 0003bac0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003bad0:· | 0003bad0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003bae0:· | 0003bae0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003baf0:· | 0003baf0:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003bb00:· | 0003bb00:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003bb10:· | 0003bb10:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003bb20:· | 0003bb20:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003bb30:· | 0003bb30:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003bb40:· | 0003bb40:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003bb50:· | 0003bb50:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | ||
| 0003bb60:· | 0003bb60:·372d·3030·2d30·3130·3032·300a·2020·2d20··7-00-010020.··-· | ||
| 0003bb70:· | 0003bb70:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003bb80:· | 0003bb80:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003bb90:· | 0003bb90:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003bba0:·5 | 0003bba0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003bbb0:·2 | 0003bbb0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bbc0:· | 0003bbc0:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003bbd0:· | 0003bbd0:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003bbe0:· | 0003bbe0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bbf0:· | 0003bbf0:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003bc00:· | 0003bc00:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003bc10:· | 0003bc10:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bc20:· | 0003bc20:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003bc30:· | 0003bc30:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003bc40:· | 0003bc40:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003bc50:· | 0003bc50:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003bc60:· | 0003bc60:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003bc70:· | 0003bc70:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003bc80:·6 | 0003bc80:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003bc90:·20 | 0003bc90:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003bca0:· | 0003bca0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003bcb0:· | 0003bcb0:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003bcc0:· | 0003bcc0:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| Max diff block lines reached; 16245185/16301655 bytes (99.65%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 115 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 291, 33 lines modified | Offset 310, 14 lines modified | ||
| 291 | ··-·PCI-DSSv4-11.5.2 | 310 | ··-·PCI-DSSv4-11.5.2 |
| 292 | ··-·high_complexity | 311 | ··-·high_complexity |
| 293 | ··-·high_severity | 312 | ··-·high_severity |
| 294 | ··-·medium_disruption | 313 | ··-·medium_disruption |
| 295 | ··-·no_reboot_needed | 314 | ··-·no_reboot_needed |
| 296 | ··-·restrict_strategy | 315 | ··-·restrict_strategy |
| 297 | ··-·rpm_verify_hashes | 316 | ··-·rpm_verify_hashes |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 300 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 301 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 302 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 303 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 304 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 305 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 306 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 307 | fi | ||
| 308 | else | ||
| 309 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 310 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 317 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 318 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 313 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 319 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 314 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 320 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 321 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 322 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 340, 14 lines modified | Offset 340, 50 lines modified | ||
| 340 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 340 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 341 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 341 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 342 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 342 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 345 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 345 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 346 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 346 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 352 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 353 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 354 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 355 | declare·-A·SETPERMS_RPM_DICT | ||
| 356 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 357 | #·is·expected·by·the·RPM·database | ||
| 358 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 359 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 360 | do | ||
| 361 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 362 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 363 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 364 | ········do | ||
| 365 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 366 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 367 | ········done | ||
| 368 | done | ||
| 369 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 370 | #·correct·values | ||
| 371 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 372 | do | ||
| 373 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 374 | done | ||
| 375 | else | ||
| 376 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 377 | fi | ||
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 348 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 349 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 350 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 351 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 352 | -·name:·Gather·the·package·facts | 383 | -·name:·Gather·the·package·facts |
| 353 | ··package_facts: | 384 | ··package_facts: |
| Offset 463, 50 lines modified | Offset 499, 14 lines modified | ||
| 463 | ··-·PCI-DSSv4-11.5.2 | 499 | ··-·PCI-DSSv4-11.5.2 |
| 464 | ··-·high_complexity | 500 | ··-·high_complexity |
| 465 | ··-·high_severity | 501 | ··-·high_severity |
| 466 | ··-·medium_disruption | 502 | ··-·medium_disruption |
| 467 | ··-·no_reboot_needed | 503 | ··-·no_reboot_needed |
| 468 | ··-·restrict_strategy | 504 | ··-·restrict_strategy |
| 469 | ··-·rpm_verify_permissions | 505 | ··-·rpm_verify_permissions |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1299032/1306594 bytes (99.42%) of diff not shown. | |||
| Offset 15258, 419 lines modified | Offset 15258, 419 lines modified | ||
| 0003b990:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b990:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b9a0:·3533·3130·2220·7461·6269·6e64·6578·3d22··5310"·tabindex=" | 0003b9a0:·3533·3130·2220·7461·6269·6e64·6578·3d22··5310"·tabindex=" | ||
| 0003b9b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b9b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b9c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b9c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b9d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b9d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b9e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b9e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b9f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b9f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ba00:·6469·6174·696f·6e20· | 0003ba00:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003ba10:·7 | 0003ba10:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003ba20:· | 0003ba20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003ba30:·6 | 0003ba30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003ba40:· | 0003ba40:·7073·6522·2069·643d·2269·646d·3533·3130··pse"·id="idm5310 | ||
| 0003ba50:· | 0003ba50:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 0003ba60:· | 0003ba60:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003ba70:·7 | 0003ba70:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003ba80:· | 0003ba80:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 0003ba90:·6 | 0003ba90:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | ||
| 0003baa0:· | 0003baa0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | ||
| 0003bab0:· | 0003bab0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | ||
| 0003bac0:· | 0003bac0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003bad0:· | 0003bad0:·2072·706d·2d6f·7374·7265·6520·3b7d·2026···rpm-ostree·;}·& | ||
| 0003bae0:·6 | 0003bae0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003baf0:· | 0003baf0:·2d2d·7175·6965·7420·2d71·2062·6f6f·7463··--quiet·-q·bootc | ||
| 0003bb00:· | 0003bb00:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003bb10:·2 | 0003bb10:·2021·2072·706d·202d·2d71·7569·6574·202d···!·rpm·--quiet·- | ||
| 0003bb20:·7 | 0003bb20:·7120·6f70·656e·7368·6966·742d·6b75·6265··q·openshift-kube | ||
| 0003bb30:· | 0003bb30:·6c65·7420·3b7d·2029·3b20·7468·656e·0a0a··let·;}·);·then.. | ||
| 0003bb40:· | 0003bb40:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | ||
| 0003bb50:·6 | 0003bb50:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | ||
| 0003bb60:·7 | 0003bb60:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | ||
| 0003bb70:·6 | 0003bb70:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | ||
| 0003bb80:· | 0003bb80:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | ||
| 0003bb90:· | 0003bb90:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | ||
| 0003bba0:·20 | 0003bba0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | ||
| 0003bbb0:· | 0003bbb0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | ||
| 0003bbc0:· | 0003bbc0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003bbd0:· | 0003bbd0:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | ||
| 0003bbe0:·2 | 0003bbe0:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | ||
| 0003bbf0:· | 0003bbf0:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | ||
| 0003bc00:· | 0003bc00:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | ||
| 0003bc10:·2 | 0003bc10:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | ||
| 0003bc20:· | 0003bc20:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003bc30:· | 0003bc30:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | ||
| 0003bc40:·2 | 0003bc40:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | ||
| 0003bc50:·2 | 0003bc50:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | ||
| 0003bc60:· | 0003bc60:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | ||
| 0003bc70:· | 0003bc70:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | ||
| 0003bc80:· | 0003bc80:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | ||
| 0003bc90:· | 0003bc90:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | ||
| 0003bca0:· | 0003bca0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | ||
| 0003bcb0:· | 0003bcb0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | ||
| 0003bcc0:·6 | 0003bcc0:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | ||
| 0003bcd0:·7 | 0003bcd0:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | ||
| 0003bce0:· | 0003bce0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003bcf0:· | 0003bcf0:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | ||
| 0003bd00:· | 0003bd00:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | ||
| 0003bd10:· | 0003bd10:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | ||
| 0003bd20:·6 | 0003bd20:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003bd30:· | 0003bd30:·616c·6c0a·2020·2020·0a66·690a·0a65·6c73··all.····.fi..els | ||
| 0003bd40:·6 | 0003bd40:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | ||
| 0003bd50:· | 0003bd50:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | ||
| 0003bd60:·6 | 0003bd60:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | ||
| 0003bd70:· | 0003bd70:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | ||
| 0003bd80:· | 0003bd80:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | ||
| 0003bd90:· | 0003bd90:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003bda0:· | 0003bda0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003bdb0:· | 0003bdb0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003bdc0:· | 0003bdc0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003bdd0:· | 0003bdd0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bde0:· | 0003bde0:·6d35·3331·3122·2074·6162·696e·6465·783d··m5311"·tabindex= | ||
| 0003bdf0:· | 0003bdf0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003be00:· | 0003be00:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003be10:· | 0003be10:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003be20:·6 | 0003be20:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003be30:· | 0003be30:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003be40:·6 | 0003be40:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003be50:· | 0003be50:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003be60:· | 0003be60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003be70:· | 0003be70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003be80:· | 0003be80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003be90:· | 0003be90:·3533·3131·223e·3c74·6162·6c65·2063·6c61··5311"><table·cla | ||
| 0003bea0:· | 0003bea0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003beb0:· | 0003beb0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003bec0:· | 0003bec0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003bed0:· | 0003bed0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003bee0:· | 0003bee0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003bef0:· | 0003bef0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003bf00:· | 0003bf00:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003bf10:· | 0003bf10:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003bf20:· | 0003bf20:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003bf30:· | 0003bf30:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003bf40:· | 0003bf40:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003bf50:· | 0003bf50:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003bf60:· | 0003bf60:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003bf70:· | 0003bf70:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003bf80:· | 0003bf80:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003bf90:· | 0003bf90:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003bfa0:· | 0003bfa0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003bfb0:· | 0003bfb0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003bfc0:· | 0003bfc0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003bfd0:· | 0003bfd0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003bfe0:· | 0003bfe0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003bff0:· | 0003bff0:·310a·2020·2d20·4449·5341·2d53·5449·472d··1.··-·DISA-STIG- | ||
| 0003c000:· | 0003c000:·4f4c·3037·2d30·302d·3031·3030·3230·0a20··OL07-00-010020.· | ||
| 0003c010:· | 0003c010:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003c020:· | 0003c020:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003c030:· | 0003c030:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003c040:· | 0003c040:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003c050:· | 0003c050:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003c060:· | 0003c060:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003c070:· | 0003c070:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003c080:· | 0003c080:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003c090:· | 0003c090:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003c0a0:· | 0003c0a0:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003c0b0:· | 0003c0b0:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c0c0:· | 0003c0c0:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003c0d0:· | 0003c0d0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003c0e0:·202 | 0003c0e0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003c0f0:· | 0003c0f0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003c100:· | 0003c100:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003c110:· | 0003c110:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003c120:·6 | 0003c120:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003c130:· | 0003c130:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003c140:· | 0003c140:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003c150:·7 | 0003c150:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003c160:· | 0003c160:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| Max diff block lines reached; 27422448/27478918 bytes (99.79%) of diff not shown. | |||
| Offset 15046, 246 lines modified | Offset 15046, 246 lines modified | ||
| 0003ac50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac60:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | 0003ac60:·6964·6d36·3138·3322·2074·6162·696e·6465··idm6183"·tabinde | ||
| 0003ac70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003aca0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003aca0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003acc0:·656d·6564·6961·7469·6f6e·204 | 0003acc0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003acd0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003ace0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003acf0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad10:·7073·6522·2069·643d·2269·646d·3631·3833··pse"·id="idm6183 | |||
| 0003ad20:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad30:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad40:·3d20·2264·7261·6375·742d·6669·7073·220a··=·"dracut-fips". | |||
| 0003ad50:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003ad60:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003ad70:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ad80:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003ad90:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ada0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003adb0:·2369·646d·3631·3834·2220·7461·6269·6e64··#idm6184"·tabind | |||
| 0003adc0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003add0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ade0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003adf0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ae00:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ae10:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003a | 0003ae20:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | ||
| 0003a | 0003ae30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003a | 0003ae40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003a | 0003ae50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003a | 0003ae60:·646d·3631·3834·223e·3c74·6162·6c65·2063··dm6184"><table·c | ||
| 0003a | 0003ae70:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003a | 0003ae80:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003a | 0003ae90:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003a | 0003aea0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003a | 0003aeb0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003a | 0003aec0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003a | 0003aed0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003a | 0003aee0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003a | 0003aef0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003a | 0003af00:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003a | 0003af10:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003a | 0003af20:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003a | 0003af30:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003a | 0003af40:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003a | 0003af50:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003af60:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003af70:·6472·6163·7574·2d66·6970·730a·0a63·6c61··dracut-fips..cla | |||
| 0003af80:·7373·2069·6e73·7461·6c6c·5f64·7261·6375··ss·install_dracu | |||
| 0003af90:·742d·6669·7073·207b·0a20·2070·6163·6b61··t-fips·{.··packa | |||
| 0003ae10:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003ae20:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003ae30:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003ae40:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003ae50:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003ae60:·434a·4953·2d35·2e31·302e·312e·320a·2020··CJIS-5.10.1.2.·· | |||
| 0003ae70:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | |||
| 0003ae80:·2e31·332e·3131·0a20·202d·204e·4953·542d··.13.11.··-·NIST- | |||
| 0003ae90:·3830·302d·3137·312d·332e·3133·2e38·0a20··800-171-3.13.8.· | |||
| 0003aea0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003aeb0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 0003aec0:·3830·302d·3533·2d49·412d·370a·2020·2d20··800-53-IA-7.··-· | |||
| 0003aed0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003aee0:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003aef0:·332d·5343·2d31·3228·3229·0a20·202d·204e··3-SC-12(2).··-·N | |||
| 0003af00:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003af10:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | |||
| 0003af20:·2d35·332d·5343·2d31·330a·2020·2d20·656e··-53-SC-13.··-·en | |||
| 0003af30:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003af40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003af50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003af60:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003af70:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003af80:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003af90:·2070·6163·6b61·6765·5f64·7261·6375·742d···package_dracut- | |||
| 0003afa0:·6669·7073·5f69·6e73·7461·6c6c·6564·0a0a··fips_installed.. | |||
| 0003afb0:·2d20·6e61·6d65·3a20·456e·7375·7265·2064··-·name:·Ensure·d | |||
| 0003afc0:·7261·6375·742d·6669·7073·2069·7320·696e··racut-fips·is·in | |||
| 0003afd0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003afe0:·653a·0a20·2020·206e·616d·653a·2064·7261··e:.····name:·dra | |||
| 0003aff0:·6375·742d·6669·7073·0a20·2020·2073·7461··cut-fips.····sta | |||
| 0003b000:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b010:·656e·3a20·2820·6e6f·7420·2820·6c6f·6f6b··en:·(·not·(·look | |||
| 0003b020:·7570·2822·656e·7622·2c20·2263·6f6e·7461··up("env",·"conta | |||
| 0003b030:·696e·6572·2229·203d·3d20·2262·7772·6170··iner")·==·"bwrap | |||
| 0003b040:·2d6f·7362·7569·6c64·2220·2920·616e·6420··-osbuild"·)·and· | |||
| 0003b050:·2822·6b65·726e·656c·2220·696e·2061·6e73··("kernel"·in·ans | |||
| 0003b060:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b070:·6765·730a·2020·2020·6f72·2022·6b65·726e··ges.····or·"kern | |||
| 0003b080:·656c·2d75·656b·2220·696e·2061·6e73·6962··el-uek"·in·ansib | |||
| 0003b090:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b0a0:·7329·2029·0a20·2074·6167·733a·0a20·202d··s)·).··tags:.··- | |||
| 0003b0b0:·2043·4a49·532d·352e·3130·2e31·2e32·0a20···CJIS-5.10.1.2.· | |||
| 0003b0c0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | |||
| 0003b0d0:·332e·3133·2e31·310a·2020·2d20·4e49·5354··3.13.11.··-·NIST | |||
| 0003b0e0:·2d38·3030·2d31·3731·2d33·2e31·332e·380a··-800-171-3.13.8. | |||
| 0003b0f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b100:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003b110:·2d38·3030·2d35·332d·4941·2d37·0a20·202d··-800-53-IA-7.··- | |||
| 0003b120:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003b130:·3132·0a20·202d·204e·4953·542d·3830·302d··12.··-·NIST-800- | |||
| 0003b140:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003b150:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003b160:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003b170:·302d·3533·2d53·432d·3133·0a20·202d·2065··0-53-SC-13.··-·e | |||
| 0003b180:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b190:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1a0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1b0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1c0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b1d0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1e0:·2d20·7061·636b·6167·655f·6472·6163·7574··-·package_dracut | |||
| 0003b1f0:·2d66·6970·735f·696e·7374·616c·6c65·640a··-fips_installed. | |||
| 0003b200:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b210:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b220:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b230:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b240:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b250:·3d22·2369·646d·3631·3834·2220·7461·6269··="#idm6184"·tabi | |||
| 0003b260:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b270:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b280:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b290:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b2a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| Max diff block lines reached; 6464783/6482889 bytes (99.72%) of diff not shown. | |||
| Offset 92, 14 lines modified | Offset 92, 53 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"dracut-fips" | ||
| 102 | version·=·"*" | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | include·install_dracut-fips | ||
| 109 | class·install_dracut-fips·{ | ||
| 110 | ··package·{·'dracut-fips': | ||
| 111 | ····ensure·=>·'installed', | ||
| 112 | ··} | ||
| 113 | } | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 121 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 122 | ····yum·install·-y·"dracut-fips" | ||
| 123 | fi | ||
| 124 | else | ||
| 125 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 126 | fi | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=dracut-fips | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | -·name:·Gather·the·package·facts | 138 | -·name:·Gather·the·package·facts |
| 105 | ··package_facts: | 139 | ··package_facts: |
| Offset 139, 53 lines modified | Offset 178, 14 lines modified | ||
| 139 | ··-·NIST-800-53-SC-13 | 178 | ··-·NIST-800-53-SC-13 |
| 140 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 180 | ··-·low_complexity |
| 142 | ··-·low_disruption | 181 | ··-·low_disruption |
| 143 | ··-·medium_severity | 182 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 145 | ··-·package_dracut-fips_installed | 184 | ··-·package_dracut-fips_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"dracut-fips" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 156 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·);·then | ||
| 157 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | ||
| 158 | ····yum·install·-y·"dracut-fips" | ||
| 159 | fi | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_dracut-fips | ||
| 169 | class·install_dracut-fips·{ | ||
| 170 | ··package·{·'dracut-fips': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=dracut-fips | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 186 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 182 | $·sudo·yum·install·dracut-fips | 187 | $·sudo·yum·install·dracut-fips |
| 183 | dracut·-f | 188 | dracut·-f |
| 184 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 189 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 185 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 190 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 186 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 191 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 216, 14 lines modified | Offset 216, 83 lines modified | ||
| 216 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 216 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 218 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 219 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 219 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 220 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 220 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 221 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 222 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule | 222 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r958408_rule |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 225 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·rpm·--quiet·-q·grub2-common;·};·then | ||
| 226 | #·prelink·not·installed | ||
| 227 | if·test·-e·/etc/sysconfig/prelink·-o·-e·/usr/sbin/prelink;·then | ||
| 228 | ····if·grep·-q·^PRELINKING·/etc/sysconfig/prelink | ||
| 229 | ····then | ||
| 230 | ········sed·-i·'s/^PRELINKING[:blank:]*=[:blank:]*[:alpha:]*/PRELINKING=no/'·/etc/sysconfig/prelink | ||
| 231 | ····else | ||
| 232 | ········printf·'\n'·>>·/etc/sysconfig/prelink | ||
| 233 | ········printf·'%s\n'·'#·Set·PRELINKING=no·per·security·requirements'·'PRELINKING=no'·>>·/etc/sysconfig/prelink | ||
| Max diff block lines reached; 721435/729657 bytes (98.87%) of diff not shown. | |||
| Offset 15123, 419 lines modified | Offset 15123, 419 lines modified | ||
| 0003b120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b130:·2223·6964·6d35·3331·3022·2074·6162·696e··"#idm5310"·tabin | 0003b130:·2223·6964·6d35·3331·3022·2074·6162·696e··"#idm5310"·tabin | ||
| 0003b140:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b140:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b150:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b150:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b160:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b160:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b170:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b170:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b180:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b180:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b190:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b190:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b1a0:·6 | 0003b1a0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b1b0:·3 | 0003b1b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b1c0:· | 0003b1c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b1d0:· | 0003b1d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b1e0:· | 0003b1e0:·6d35·3331·3022·3e3c·7072·653e·3c63·6f64··m5310"><pre><cod | ||
| 0003b1f0:· | 0003b1f0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b200:·6 | 0003b200:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b210:·6 | 0003b210:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b220:· | 0003b220:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b230:· | 0003b230:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b240:· | 0003b240:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b250:· | 0003b250:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b260:·7 | 0003b260:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b270:· | 0003b270:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b280:· | 0003b280:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b290:· | 0003b290:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b2a0:· | 0003b2a0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b2b0:· | 0003b2b0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b2c0:· | 0003b2c0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b2d0:· | 0003b2d0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b2e0:·6 | 0003b2e0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b2f0:· | 0003b2f0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b300:· | 0003b300:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b310:·6 | 0003b310:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b320:· | 0003b320:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b330:·6 | 0003b330:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b340:· | 0003b340:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b350:· | 0003b350:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b360:· | 0003b360:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b370:· | 0003b370:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b380:· | 0003b380:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b390:· | 0003b390:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b3a0:· | 0003b3a0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b3b0:· | 0003b3b0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b3c0:· | 0003b3c0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b3d0:· | 0003b3d0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b3e0:· | 0003b3e0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b3f0:· | 0003b3f0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b400:· | 0003b400:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b410:· | 0003b410:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b420:· | 0003b420:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b430:· | 0003b430:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b440:· | 0003b440:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b450:· | 0003b450:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b460:· | 0003b460:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b470:· | 0003b470:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b480:· | 0003b480:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b490:· | 0003b490:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b4a0:· | 0003b4a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b4b0:· | 0003b4b0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b4c0:· | 0003b4c0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b4d0:· | 0003b4d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b4e0:· | 0003b4e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b4f0:·6 | 0003b4f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b500:·7 | 0003b500:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b510:·6 | 0003b510:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b520:· | 0003b520:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b530:·6 | 0003b530:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b540:· | 0003b540:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b550:· | 0003b550:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b560:·65 | 0003b560:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b570:· | 0003b570:·3d22·2369·646d·3533·3131·2220·7461·6269··="#idm5311"·tabi | ||
| 0003b580:· | 0003b580:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b590:·7 | 0003b590:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b5a0:·6 | 0003b5a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5b0:·6 | 0003b5b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b5c0:· | 0003b5c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b5d0:· | 0003b5d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b5e0:· | 0003b5e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b5f0:· | 0003b5f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b600:· | 0003b600:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b610:·7 | 0003b610:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b620:· | 0003b620:·3d22·6964·6d35·3331·3122·3e3c·7461·626c··="idm5311"><tabl | ||
| 0003b630:· | 0003b630:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b640:· | 0003b640:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b650:· | 0003b650:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b660:· | 0003b660:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b670:· | 0003b670:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b680:·3 | 0003b680:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b690:· | 0003b690:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b6a0:· | 0003b6a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b6b0:· | 0003b6b0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b6c0:· | 0003b6c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b6d0:· | 0003b6d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b6e0:· | 0003b6e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b6f0:· | 0003b6f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b700:· | 0003b700:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b710:· | 0003b710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b720:· | 0003b720:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b730:·2 | 0003b730:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b740:· | 0003b740:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b750:· | 0003b750:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b760:· | 0003b760:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b770:·6 | 0003b770:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b780:· | 0003b780:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | ||
| 0003b790:· | 0003b790:·5354·4947·2d4f·4c30·372d·3030·2d30·3130··STIG-OL07-00-010 | ||
| 0003b7a0:· | 0003b7a0:·3032·300a·2020·2d20·4e49·5354·2d38·3030··020.··-·NIST-800 | ||
| 0003b7b0:· | 0003b7b0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003b7c0:· | 0003b7c0:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003b7d0:· | 0003b7d0:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003b7e0:· | 0003b7e0:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003b7f0:· | 0003b7f0:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003b800:· | 0003b800:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003b810:· | 0003b810:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003b820:· | 0003b820:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003b830:· | 0003b830:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003b840:· | 0003b840:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003b850:· | 0003b850:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003b860:·2 | 0003b860:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003b870:· | 0003b870:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003b880:· | 0003b880:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003b890:· | 0003b890:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003b8a0:· | 0003b8a0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003b8b0:· | 0003b8b0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003b8c0:· | 0003b8c0:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003b8d0:·6f | 0003b8d0:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003b8e0:· | 0003b8e0:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003b8f0:· | 0003b8f0:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| Max diff block lines reached; 9746227/9802697 bytes (99.42%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 33 lines modified | ||
| 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 97 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 98 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Gather·the·package·facts | 122 | -·name:·Gather·the·package·facts |
| 110 | ··package_facts: | 123 | ··package_facts: |
| Offset 277, 33 lines modified | Offset 296, 14 lines modified | ||
| 277 | ··-·PCI-DSSv4-11.5.2 | 296 | ··-·PCI-DSSv4-11.5.2 |
| 278 | ··-·high_complexity | 297 | ··-·high_complexity |
| 279 | ··-·high_severity | 298 | ··-·high_severity |
| 280 | ··-·medium_disruption | 299 | ··-·medium_disruption |
| 281 | ··-·no_reboot_needed | 300 | ··-·no_reboot_needed |
| 282 | ··-·restrict_strategy | 301 | ··-·restrict_strategy |
| 283 | ··-·rpm_verify_hashes | 302 | ··-·rpm_verify_hashes |
| 284 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 285 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 286 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 287 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 288 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 289 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 290 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 291 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 292 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 293 | fi | ||
| 294 | else | ||
| 295 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 296 | fi | ||
| 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 298 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 304 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 299 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 305 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 300 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 306 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 301 | $·rpm·-qf·FILENAME | 307 | $·rpm·-qf·FILENAME |
| 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 326, 14 lines modified | Offset 326, 50 lines modified | ||
| 326 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 326 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 327 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 329 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 329 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 332 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 332 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 338 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 339 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 340 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 341 | declare·-A·SETPERMS_RPM_DICT | ||
| 342 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 343 | #·is·expected·by·the·RPM·database | ||
| 344 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 345 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 346 | do | ||
| 347 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 348 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 349 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 350 | ········do | ||
| 351 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 352 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 353 | ········done | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 334 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 335 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 336 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 337 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 338 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 339 | ··package_facts: | 370 | ··package_facts: |
| Offset 449, 50 lines modified | Offset 485, 14 lines modified | ||
| 449 | ··-·PCI-DSSv4-11.5.2 | 485 | ··-·PCI-DSSv4-11.5.2 |
| 450 | ··-·high_complexity | 486 | ··-·high_complexity |
| 451 | ··-·high_severity | 487 | ··-·high_severity |
| 452 | ··-·medium_disruption | 488 | ··-·medium_disruption |
| 453 | ··-·no_reboot_needed | 489 | ··-·no_reboot_needed |
| 454 | ··-·restrict_strategy | 490 | ··-·restrict_strategy |
| 455 | ··-·rpm_verify_permissions | 491 | ··-·rpm_verify_permissions |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 853493/861063 bytes (99.12%) of diff not shown. | |||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3839·3931··target="#idm8991 | 00039390:·7461·7267·6574·3d22·2369·646d·3839·3931··target="#idm8991 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·4 | 00039400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 00039410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039440:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039450:·3d22·6964·6d38·3939·3122·3e3c·7072·653e··="idm8991"><pre> | |||
| 00039460:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00039470:·735d·5d0a·6e61·6d65·203d·2022·676c·6962··s]].name·=·"glib | |||
| 00039480:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039490:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000394a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000394b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000394c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000394d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000394e0:·743d·2223·6964·6d38·3939·3222·2074·6162··t="#idm8992"·tab | |||
| 000394f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039500:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039510:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039520:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00039530:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00039540:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00039550:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 00039560:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039570:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039580:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039590:·3d22·6964·6d38·3939·3222·3e3c·7461·626c··="idm8992"><tabl | |||
| 000395a0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 000395b0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000395c0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 000395d0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 000395e0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 000395f0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039600:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00039610:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00039620:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00039630:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00039640:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00039650:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00039660:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00039670:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00039680:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00039690:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 000396a0:·6c6c·5f67·6c69·6263·0a0a·636c·6173·7320··ll_glibc..class· | |||
| 000396b0:·696e·7374·616c·6c5f·676c·6962·6320·7b0a··install_glibc·{. | |||
| 000396c0:·2020·7061·636b·6167·6520·7b20·2767·6c69····package·{·'gli | |||
| 000396d0:·6263·273a·0a20·2020·2065·6e73·7572·6520··bc':.····ensure· | |||
| 000396e0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 000396f0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 00039700:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039710:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039720:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039730:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039740:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00039750:·3939·3322·2074·6162·696e·6465·783d·2230··993"·tabindex="0 | |||
| 00039760:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039770:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039780:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039790:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 000397a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 000397b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 00039 | 000397c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 00039 | 000397d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00039 | 000397e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00039 | 000397f0:·7365·2220·6964·3d22·6964·6d38·3939·3322··se"·id="idm8993" | ||
| 00039 | 00039800:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 00039 | 00039810:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 00039 | 00039820:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039 | 00039830:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039 | 00039840:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 00039 | 00039850:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 000394b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000394c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000394d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000394e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000394f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039500:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039510:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039520:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039530:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039540:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00039550:·2045·6e73·7572·6520·676c·6962·6320·6973···Ensure·glibc·is | |||
| 00039560:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039570:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039580:·676c·6962·630a·2020·2020·7374·6174·653a··glibc.····state: | |||
| 00039590:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 000395a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000395b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000395c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000395d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000395e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000395f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039600:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039610:·676c·6962·635f·696e·7374·616c·6c65·640a··glibc_installed. | |||
| 00039620:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00039630:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00039640:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00039650:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00039660:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00039670:·3d22·2369·646d·3839·3932·2220·7461·6269··="#idm8992"·tabi | |||
| 00039680:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039690:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 000396a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 000396b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 000396c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 000396d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 000396e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 000396f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039700:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039710:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039720:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 00039730:·3939·3222·3e3c·7072·653e·3c63·6f64·653e··992"><pre><code> | |||
| 00039740:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00039750:·6d65·203d·2022·676c·6962·6322·0a76·6572··me·=·"glibc".ver | |||
| 00039760:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00039770:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00039780:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00039790:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 000397a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 000397b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 000397c0:·6d38·3939·3322·2074·6162·696e·6465·783d··m8993"·tabindex= | |||
| Max diff block lines reached; 207334/230408 bytes (89.99%) of diff not shown. | |||
| Offset 64, 120 lines modified | Offset 64, 120 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 76 | -·name:·Ensure·glibc·is·installed | ||
| 77 | ··package: | ||
| 78 | ····name:·glibc | ||
| 79 | ····state:·present | ||
| 80 | ··tags: | ||
| 81 | ··-·enable_strategy | ||
| 82 | ··-·low_complexity | ||
| 83 | ··-·low_disruption | ||
| 84 | ··-·medium_severity | ||
| 85 | ··-·no_reboot_needed | ||
| 86 | ··-·package_glibc_installed | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 88 | [[packages]] | 72 | [[packages]] |
| 89 | name·=·"glibc" | 73 | name·=·"glibc" |
| 90 | version·=·"*" | 74 | version·=·"*" |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 97 | ····yum·install·-y·"glibc" | ||
| 98 | fi | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 75 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 76 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 77 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 78 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 79 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | include·install_glibc | 80 | include·install_glibc |
| 105 | class·install_glibc·{ | 81 | class·install_glibc·{ |
| 106 | ··package·{·'glibc': | 82 | ··package·{·'glibc': |
| 107 | ····ensure·=>·'installed', | 83 | ····ensure·=>·'installed', |
| 108 | ··} | 84 | ··} |
| 109 | } | 85 | } |
| 86 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 87 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 88 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 89 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 90 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 91 | if·!·rpm·-q·--quiet·"glibc"·;·then | ||
| 92 | ····yum·install·-y·"glibc" | ||
| 93 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | package·--add=glibc | 99 | package·--add=glibc |
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | ||
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | ||
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | ||
| 120 | $·sudo·yum·install·uuidd | ||
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | ||
| 122 | Severity: ·medium | ||
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure· | 105 | -·name:·Ensure·glibc·is·installed |
| 130 | ··package: | 106 | ··package: |
| 131 | ····name:· | 107 | ····name:·glibc |
| 132 | ····state:·present | 108 | ····state:·present |
| 133 | ··tags: | 109 | ··tags: |
| 134 | ··-·enable_strategy | 110 | ··-·enable_strategy |
| 135 | ··-·low_complexity | 111 | ··-·low_complexity |
| 136 | ··-·low_disruption | 112 | ··-·low_disruption |
| 137 | ··-·medium_severity | 113 | ··-·medium_severity |
| 138 | ··-·no_reboot_needed | 114 | ··-·no_reboot_needed |
| 139 | ··-·package_ | 115 | ··-·package_glibc_installed |
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | ||
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | ||
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | ||
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | ||
| 120 | $·sudo·yum·install·uuidd | ||
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | ||
| 122 | Severity: ·medium | ||
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | [[packages]] | 125 | [[packages]] |
| 142 | name·=·"uuidd" | 126 | name·=·"uuidd" |
| 143 | version·=·"*" | 127 | version·=·"*" |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | if·!·rpm·-q·--quiet·"uuidd"·;·then | ||
| 150 | ····yum·install·-y·"uuidd" | ||
| 151 | fi | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_uuidd | 133 | include·install_uuidd |
| 158 | class·install_uuidd·{ | 134 | class·install_uuidd·{ |
| 159 | ··package·{·'uuidd': | 135 | ··package·{·'uuidd': |
| 160 | ····ensure·=>·'installed', | 136 | ····ensure·=>·'installed', |
| 161 | ··} | 137 | ··} |
| 162 | } | 138 | } |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 26945/32852 bytes (82.02%) of diff not shown. | |||
| Offset 15108, 419 lines modified | Offset 15108, 419 lines modified | ||
| 0003b030:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b030:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b040:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | 0003b040:·3331·3022·2074·6162·696e·6465·783d·2230··310"·tabindex="0 | ||
| 0003b050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b050:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b060:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b070:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b080:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b090:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b0a0:·6961·7469·6f6e·20 | 0003b0a0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b0b0:·6 | 0003b0b0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b0c0:· | 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b0d0:· | 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b0e0:· | 0003b0e0:·7365·2220·6964·3d22·6964·6d35·3331·3022··se"·id="idm5310" | ||
| 0003b0f0:·3 | 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b100:· | 0003b100:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b110:· | 0003b110:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b120:·6 | 0003b120:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b130:· | 0003b130:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b140:· | 0003b140:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b150:· | 0003b150:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b160:· | 0003b160:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b170:· | 0003b170:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b180:· | 0003b180:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b190:· | 0003b190:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b1a0:·3 | 0003b1a0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b1b0:· | 0003b1b0:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b1c0:· | 0003b1c0:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b1d0:·74 | 0003b1d0:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b1e0:·2 | 0003b1e0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b1f0:· | 0003b1f0:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b200:·20 | 0003b200:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b210:·74 | 0003b210:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b220:· | 0003b220:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b230:·206 | 0003b230:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b240:· | 0003b240:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b250:· | 0003b250:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b260:· | 0003b260:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b270:· | 0003b270:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b280:· | 0003b280:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b290:·2d | 0003b290:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b2a0:· | 0003b2a0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b2b0:· | 0003b2b0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b2c0:·35 | 0003b2c0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b2d0:· | 0003b2d0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b2e0:· | 0003b2e0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b2f0:· | 0003b2f0:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b300:· | 0003b300:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b310:· | 0003b310:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b320:· | 0003b320:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b330:· | 0003b330:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b340:· | 0003b340:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b350:· | 0003b350:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b360:· | 0003b360:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b370:·6 | 0003b370:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b380:· | 0003b380:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b390:·2 | 0003b390:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b3a0:· | 0003b3a0:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | ||
| 0003b3b0:· | 0003b3b0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b3c0:· | 0003b3c0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b3d0:· | 0003b3d0:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b3e0:· | 0003b3e0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b3f0:·65 | 0003b3f0:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b400:·6 | 0003b400:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b410:· | 0003b410:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b420:· | 0003b420:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b430:· | 0003b430:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b440:·6 | 0003b440:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b450:· | 0003b450:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b460:· | 0003b460:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b470:· | 0003b470:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b480:· | 0003b480:·3533·3131·2220·7461·6269·6e64·6578·3d22··5311"·tabindex=" | ||
| 0003b490:· | 0003b490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b4a0:· | 0003b4a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b4b0:·6 | 0003b4b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b4c0:· | 0003b4c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b4d0:· | 0003b4d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b4e0:·6 | 0003b4e0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b4f0:· | 0003b4f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b500:·6 | 0003b500:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b510:·616e· | 0003b510:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b520:· | 0003b520:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b530:· | 0003b530:·3331·3122·3e3c·7461·626c·6520·636c·6173··311"><table·clas | ||
| 0003b540:· | 0003b540:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b550:· | 0003b550:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b560:· | 0003b560:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b570:· | 0003b570:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b580:· | 0003b580:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b590:· | 0003b590:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b5a0:·3 | 0003b5a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b5b0:· | 0003b5b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b5c0:· | 0003b5c0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b5d0:·3 | 0003b5d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b5e0:·3 | 0003b5e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b5f0:·2 | 0003b5f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b600:· | 0003b600:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003b610:· | 0003b610:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003b620:· | 0003b620:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003b630:· | 0003b630:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003b640:· | 0003b640:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003b650:· | 0003b650:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003b660:· | 0003b660:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003b670:·3 | 0003b670:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003b680:· | 0003b680:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003b690:· | 0003b690:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | ||
| 0003b6a0:· | 0003b6a0:·4c30·372d·3030·2d30·3130·3032·300a·2020··L07-00-010020.·· | ||
| 0003b6b0:·2 | 0003b6b0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b6c0:· | 0003b6c0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003b6d0:· | 0003b6d0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003b6e0:· | 0003b6e0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003b6f0:· | 0003b6f0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003b700:· | 0003b700:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003b710:· | 0003b710:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003b720:· | 0003b720:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003b730:· | 0003b730:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003b740:· | 0003b740:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003b750:· | 0003b750:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b760:· | 0003b760:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003b770:·2 | 0003b770:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003b780:·2 | 0003b780:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003b790:· | 0003b790:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003b7a0:·6 | 0003b7a0:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003b7b0:·7 | 0003b7b0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003b7c0:· | 0003b7c0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003b7d0:·202 | 0003b7d0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003b7e0:·6 | 0003b7e0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003b7f0:· | 0003b7f0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003b800:· | 0003b800:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| Max diff block lines reached; 9455005/9511475 bytes (99.41%) of diff not shown. | |||
| Offset 95, 14 lines modified | Offset 95, 33 lines modified | ||
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 | 99 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010020 |
| 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 100 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule | 101 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221653r1015161_rule |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 103 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 104 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 105 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 106 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 107 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 108 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 109 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 110 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 107 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 108 | ··package_facts: | 121 | ··package_facts: |
| Offset 275, 33 lines modified | Offset 294, 14 lines modified | ||
| 275 | ··-·PCI-DSSv4-11.5.2 | 294 | ··-·PCI-DSSv4-11.5.2 |
| 276 | ··-·high_complexity | 295 | ··-·high_complexity |
| 277 | ··-·high_severity | 296 | ··-·high_severity |
| 278 | ··-·medium_disruption | 297 | ··-·medium_disruption |
| 279 | ··-·no_reboot_needed | 298 | ··-·no_reboot_needed |
| 280 | ··-·restrict_strategy | 299 | ··-·restrict_strategy |
| 281 | ··-·rpm_verify_hashes | 300 | ··-·rpm_verify_hashes |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 284 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 285 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 286 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 287 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 288 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 289 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 290 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 291 | fi | ||
| 292 | else | ||
| 293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 294 | fi | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 296 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 302 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 297 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 303 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 298 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 304 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 299 | $·rpm·-qf·FILENAME | 305 | $·rpm·-qf·FILENAME |
| 300 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 306 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 324, 14 lines modified | Offset 324, 50 lines modified | ||
| 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 324 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 325 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 | 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010010 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule | 330 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221652r991557_rule |
| 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 336 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 337 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 338 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 339 | declare·-A·SETPERMS_RPM_DICT | ||
| 340 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 341 | #·is·expected·by·the·RPM·database | ||
| 342 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 343 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 344 | do | ||
| 345 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 346 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 347 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 348 | ········do | ||
| 349 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 350 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 351 | ········done | ||
| 352 | done | ||
| 353 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 354 | #·correct·values | ||
| 355 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 356 | do | ||
| 357 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 358 | done | ||
| 359 | else | ||
| 360 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 361 | fi | ||
| 331 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 332 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 333 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 334 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 335 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 336 | -·name:·Gather·the·package·facts | 367 | -·name:·Gather·the·package·facts |
| 337 | ··package_facts: | 368 | ··package_facts: |
| Offset 447, 50 lines modified | Offset 483, 14 lines modified | ||
| 447 | ··-·PCI-DSSv4-11.5.2 | 483 | ··-·PCI-DSSv4-11.5.2 |
| 448 | ··-·high_complexity | 484 | ··-·high_complexity |
| 449 | ··-·high_severity | 485 | ··-·high_severity |
| 450 | ··-·medium_disruption | 486 | ··-·medium_disruption |
| 451 | ··-·no_reboot_needed | 487 | ··-·no_reboot_needed |
| 452 | ··-·restrict_strategy | 488 | ··-·restrict_strategy |
| 453 | ··-·rpm_verify_permissions | 489 | ··-·rpm_verify_permissions |
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 776694/784255 bytes (99.04%) of diff not shown. | |||
| Offset 15172, 419 lines modified | Offset 15172, 419 lines modified | ||
| 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b430:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b440:·2369·646d·3533·3130·2220·7461·6269·6e64··#idm5310"·tabind | 0003b440:·2369·646d·3533·3130·2220·7461·6269·6e64··#idm5310"·tabind | ||
| 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b450:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b460:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b470:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b480:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (405 lines added, 405 lines removed) | |
| 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b490:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4a0:·5265·6d65·6469·6174·696f·6e20· | 0003b4a0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b4b0:·6 | 0003b4b0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b4c0:· | 0003b4c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b4d0:·7 | 0003b4d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b4e0:·6 | 0003b4e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b4f0:· | 0003b4f0:·3533·3130·223e·3c70·7265·3e3c·636f·6465··5310"><pre><code | ||
| 0003b500:· | 0003b500:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b510:· | 0003b510:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b520:· | 0003b520:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003b530:· | 0003b530:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003b540:·7 | 0003b540:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003b550:· | 0003b550:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003b560:· | 0003b560:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b570:·727 | 0003b570:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003b580:·3 | 0003b580:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b590:· | 0003b590:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003b5a0:· | 0003b5a0:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003b5b0:·7 | 0003b5b0:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003b5c0:· | 0003b5c0:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003b5d0:·6 | 0003b5d0:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003b5e0:· | 0003b5e0:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003b5f0:· | 0003b5f0:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003b600:· | 0003b600:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003b610:·6 | 0003b610:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003b620:· | 0003b620:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003b630:·6 | 0003b630:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003b640:· | 0003b640:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003b650:· | 0003b650:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003b660:· | 0003b660:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b670:· | 0003b670:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003b680:· | 0003b680:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003b690:· | 0003b690:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003b6a0:·20 | 0003b6a0:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003b6b0:· | 0003b6b0:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003b6c0:·2 | 0003b6c0:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b6d0:·2 | 0003b6d0:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003b6e0:· | 0003b6e0:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003b6f0:· | 0003b6f0:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003b700:· | 0003b700:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003b710:· | 0003b710:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003b720:· | 0003b720:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003b730:· | 0003b730:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003b740:· | 0003b740:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003b750:· | 0003b750:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003b760:·63 | 0003b760:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003b770:· | 0003b770:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003b780:· | 0003b780:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b790:· | 0003b790:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003b7a0:· | 0003b7a0:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003b7b0:·7 | 0003b7b0:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003b7c0:·2 | 0003b7c0:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003b7d0:·6 | 0003b7d0:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003b7e0:· | 0003b7e0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003b7f0:·6d | 0003b7f0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003b800:·6 | 0003b800:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003b810:· | 0003b810:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003b820:·67 | 0003b820:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003b830:· | 0003b830:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b840:· | 0003b840:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b850:·6 | 0003b850:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b860:· | 0003b860:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b870:· | 0003b870:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b880:· | 0003b880:·2223·6964·6d35·3331·3122·2074·6162·696e··"#idm5311"·tabin | ||
| 0003b890:· | 0003b890:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b8a0:·7 | 0003b8a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b8b0:·6 | 0003b8b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b8c0:· | 0003b8c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b8d0:·6 | 0003b8d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b8e0:·656 | 0003b8e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b8f0:· | 0003b8f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b900:· | 0003b900:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b910:· | 0003b910:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b920:·7 | 0003b920:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b930:· | 0003b930:·2269·646d·3533·3131·223e·3c74·6162·6c65··"idm5311"><table | ||
| 0003b940:·2 | 0003b940:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b950:·6 | 0003b950:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b960:·6 | 0003b960:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b970:· | 0003b970:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b980:· | 0003b980:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b990:· | 0003b990:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b9a0:· | 0003b9a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b9b0:· | 0003b9b0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b9c0:· | 0003b9c0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b9d0:· | 0003b9d0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b9e0:· | 0003b9e0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b9f0:·2 | 0003b9f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003ba00:·3 | 0003ba00:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003ba10:· | 0003ba10:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003ba20:· | 0003ba20:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003ba30:· | 0003ba30:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003ba40:· | 0003ba40:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003ba50:· | 0003ba50:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003ba60:· | 0003ba60:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003ba70:· | 0003ba70:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003ba80:·6 | 0003ba80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003ba90:· | 0003ba90:·302e·342e·310a·2020·2d20·4449·5341·2d53··0.4.1.··-·DISA-S | ||
| 0003baa0:· | 0003baa0:·5449·472d·4f4c·3037·2d30·302d·3031·3030··TIG-OL07-00-0100 | ||
| 0003bab0:· | 0003bab0:·3230·0a20·202d·204e·4953·542d·3830·302d··20.··-·NIST-800- | ||
| 0003bac0:· | 0003bac0:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bad0:· | 0003bad0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bae0:· | 0003bae0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003baf0:· | 0003baf0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bb00:·5 | 0003bb00:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bb10:· | 0003bb10:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bb20:· | 0003bb20:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003bb30:· | 0003bb30:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003bb40:· | 0003bb40:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bb50:· | 0003bb50:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003bb60:· | 0003bb60:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003bb70:· | 0003bb70:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003bb80:·2 | 0003bb80:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003bb90:· | 0003bb90:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003bba0:· | 0003bba0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003bbb0:· | 0003bbb0:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003bbc0:· | 0003bbc0:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003bbd0:·6 | 0003bbd0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003bbe0:· | 0003bbe0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003bbf0:· | 0003bbf0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bc00:· | 0003bc00:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| Max diff block lines reached; 21846984/21903454 bytes (99.74%) of diff not shown. | |||
| Offset 15191, 418 lines modified | Offset 15191, 418 lines modified | ||
| 0003b560:·6574·3d22·2369·646d·3533·3130·2220·7461··et="#idm5310"·ta | 0003b560:·6574·3d22·2369·646d·3533·3130·2220·7461··et="#idm5310"·ta | ||
| 0003b570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b570:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b580:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b590:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b5a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b5a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b5b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b5b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | Diff chunk too large, falling back to line-by-line diff (404 lines added, 404 lines removed) | |
| 0003b5c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b5c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b5d0:· | 0003b5d0:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003b5e0:· | 0003b5e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b5f0:· | 0003b5f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b600:· | 0003b600:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b610:· | 0003b610:·2269·646d·3533·3130·223e·3c70·7265·3e3c··"idm5310"><pre>< | ||
| 0003b620:·6 | 0003b620:·636f·6465·3e23·2052·656d·6564·6961·7469··code>#·Remediati | ||
| 0003b630:· | 0003b630:·6f6e·2069·7320·6170·706c·6963·6162·6c65··on·is·applicable | ||
| 0003b640:· | 0003b640:·206f·6e6c·7920·696e·2063·6572·7461·696e···only·in·certain | ||
| 0003b650:· | 0003b650:·2070·6c61·7466·6f72·6d73·0a69·6620·2120···platforms.if·!· | ||
| 0003b660:· | 0003b660:·2820·7b20·7270·6d20·2d2d·7175·6965·7420··(·{·rpm·--quiet· | ||
| 0003b670:· | 0003b670:·2d71·206b·6572·6e65·6c20·3b7d·2026·616d··-q·kernel·;}·&am | ||
| 0003b680:· | 0003b680:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b690:· | 0003b690:·7175·6965·7420·2d71·2072·706d·2d6f·7374··quiet·-q·rpm-ost | ||
| 0003b6a0:· | 0003b6a0:·7265·6520·3b7d·2026·616d·703b·2661·6d70··ree·;}·&& | ||
| 0003b6b0:·3 | 0003b6b0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b6c0:· | 0003b6c0:·2d71·2062·6f6f·7463·203b·7d20·2661·6d70··-q·bootc·;}·& | ||
| 0003b6d0:· | 0003b6d0:·3b26·616d·703b·207b·2021·2072·706d·202d··;&·{·!·rpm·- | ||
| 0003b6e0:· | 0003b6e0:·2d71·7569·6574·202d·7120·6f70·656e·7368··-quiet·-q·opensh | ||
| 0003b6f0:·6 | 0003b6f0:·6966·742d·6b75·6265·6c65·7420·3b7d·2029··ift-kubelet·;}·) | ||
| 0003b700:· | 0003b700:·3b20·7468·656e·0a0a·2320·4669·6e64·2077··;·then..#·Find·w | ||
| 0003b710:· | 0003b710:·6869·6368·2066·696c·6573·2068·6176·6520··hich·files·have· | ||
| 0003b720:·6 | 0003b720:·696e·636f·7272·6563·7420·6861·7368·2028··incorrect·hash·( | ||
| 0003b730:·6 | 0003b730:·6e6f·7420·696e·202f·6574·632c·2062·6563··not·in·/etc,·bec | ||
| 0003b740:·6 | 0003b740:·6175·7365·206f·6620·7468·6520·7379·7374··ause·of·the·syst | ||
| 0003b750:· | 0003b750:·656d·2072·656c·6174·6564·2063·6f6e·6669··em·related·confi | ||
| 0003b760:· | 0003b760:·6720·6669·6c65·7329·2061·6e64·2074·6865··g·files)·and·the | ||
| 0003b770:· | 0003b770:·6e20·6765·7420·6669·6c65·7320·6e61·6d65··n·get·files·name | ||
| 0003b780:· | 0003b780:·730a·6669·6c65·735f·7769·7468·5f69·6e63··s.files_with_inc | ||
| 0003b790:· | 0003b790:·6f72·7265·6374·5f68·6173·683d·2224·2872··orrect_hash="$(r | ||
| 0003b7a0:· | 0003b7a0:·706d·202d·5661·202d·2d6e·6f63·6f6e·6669··pm·-Va·--noconfi | ||
| 0003b7b0:· | 0003b7b0:·6720·7c20·6772·6570·202d·4520·275e·2e2e··g·|·grep·-E·'^.. | ||
| 0003b7c0:·3 | 0003b7c0:·3527·207c·2061·776b·2027·7b70·7269·6e74··5'·|·awk·'{print | ||
| 0003b7d0:·2 | 0003b7d0:·2024·4e46·7d27·2029·220a·0a69·6620·5b20···$NF}'·)"..if·[· | ||
| 0003b7e0:· | 0003b7e0:·2d6e·2022·2466·696c·6573·5f77·6974·685f··-n·"$files_with_ | ||
| 0003b7f0:· | 0003b7f0:·696e·636f·7272·6563·745f·6861·7368·2220··incorrect_hash"· | ||
| 0003b800:· | 0003b800:·5d3b·2074·6865·6e0a·2020·2020·2320·4672··];·then.····#·Fr | ||
| 0003b810:· | 0003b810:·6f6d·2066·696c·6573·206e·616d·6573·2067··om·files·names·g | ||
| 0003b820:· | 0003b820:·6574·2070·6163·6b61·6765·206e·616d·6573··et·package·names | ||
| 0003b830:·2 | 0003b830:·2061·6e64·2063·6861·6e67·6520·6e65·776c···and·change·newl | ||
| 0003b840:· | 0003b840:·696e·6520·746f·2073·7061·6365·2c20·6265··ine·to·space,·be | ||
| 0003b850:· | 0003b850:·6361·7573·6520·7270·6d20·7772·6974·6573··cause·rpm·writes | ||
| 0003b860:·2 | 0003b860:·2065·6163·6820·7061·636b·6167·6520·746f···each·package·to | ||
| 0003b870:· | 0003b870:·206e·6577·206c·696e·650a·2020·2020·7061···new·line.····pa | ||
| 0003b880:·6 | 0003b880:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b890:· | 0003b890:·616c·6c3d·2224·2872·706d·202d·7166·2024··all="$(rpm·-qf·$ | ||
| 0003b8a0:· | 0003b8a0:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b8b0:·7 | 0003b8b0:·7265·6374·5f68·6173·6820·7c20·7472·2027··rect_hash·|·tr·' | ||
| 0003b8c0:· | 0003b8c0:·5c6e·2720·2720·2729·220a·0a20·2020·200a··\n'·'·')"..····. | ||
| 0003b8d0:· | 0003b8d0:·2020·2020·7975·6d20·7265·696e·7374·616c······yum·reinstal | ||
| 0003b8e0:· | 0003b8e0:·6c20·2d79·2024·7061·636b·6167·6573·5f74··l·-y·$packages_t | ||
| 0003b8f0:· | 0003b8f0:·6f5f·7265·696e·7374·616c·6c0a·2020·2020··o_reinstall.···· | ||
| 0003b900:· | 0003b900:·0a66·690a·0a65·6c73·650a·2020·2020·2667··.fi..else.····&g | ||
| 0003b910:· | 0003b910:·743b·2661·6d70·3b32·2065·6368·6f20·2752··t;&2·echo·'R | ||
| 0003b920:· | 0003b920:·656d·6564·6961·7469·6f6e·2069·7320·6e6f··emediation·is·no | ||
| 0003b930:· | 0003b930:·7420·6170·706c·6963·6162·6c65·2c20·6e6f··t·applicable,·no | ||
| 0003b940:· | 0003b940:·7468·696e·6720·7761·7320·646f·6e65·270a··thing·was·done'. | ||
| 0003b950:·6 | 0003b950:·6669·0a3c·2f63·6f64·653e·3c2f·7072·653e··fi.</code></pre> | ||
| 0003b960:· | 0003b960:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003b970:· | 0003b970:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003b980:·20 | 0003b980:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003b990:·6 | 0003b990:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003b9a0:·6765·7 | 0003b9a0:·6765·743d·2223·6964·6d35·3331·3122·2074··get="#idm5311"·t | ||
| 0003b9b0:· | 0003b9b0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b9c0:· | 0003b9c0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b9d0:· | 0003b9d0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b9e0:· | 0003b9e0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b9f0:·7 | 0003b9f0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ba00:·2 | 0003ba00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ba10:· | 0003ba10:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003ba20:· | 0003ba20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003ba30:·20 | 0003ba30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003ba40:· | 0003ba40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003ba50:·20 | 0003ba50:·2069·643d·2269·646d·3533·3131·223e·3c74···id="idm5311"><t | ||
| 0003ba60:·6 | 0003ba60:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003ba70:· | 0003ba70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003ba80:· | 0003ba80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003ba90:· | 0003ba90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003baa0:· | 0003baa0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003bab0:· | 0003bab0:·7479·3a3c·2f74·683e·3c74·643e·6869·6768··ty:</th><td>high | ||
| 0003bac0:· | 0003bac0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bad0:· | 0003bad0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bae0:· | 0003bae0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 0003baf0:·3 | 0003baf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bb00:· | 0003bb00:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003bb10:· | 0003bb10:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003bb20:·3 | 0003bb20:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003bb30:· | 0003bb30:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 0003bb40:·2 | 0003bb40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 0003bb50:·3 | 0003bb50:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 0003bb60:· | 0003bb60:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | ||
| 0003bb70:· | 0003bb70:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | ||
| 0003bb80:·6 | 0003bb80:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | ||
| 0003bb90:· | 0003bb90:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | ||
| 0003bba0:·20 | 0003bba0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | ||
| 0003bbb0:· | 0003bbb0:·2d35·2e31·302e·342e·310a·2020·2d20·4449··-5.10.4.1.··-·DI | ||
| 0003bbc0:· | 0003bbc0:·5341·2d53·5449·472d·4f4c·3037·2d30·302d··SA-STIG-OL07-00- | ||
| 0003bbd0:· | 0003bbd0:·3031·3030·3230·0a20·202d·204e·4953·542d··010020.··-·NIST- | ||
| 0003bbe0:· | 0003bbe0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003bbf0:·2d20· | 0003bbf0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bc00:· | 0003bc00:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003bc10:· | 0003bc10:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003bc20:· | 0003bc20:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bc30:· | 0003bc30:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bc40:· | 0003bc40:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bc50:·2 | 0003bc50:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bc60:· | 0003bc60:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003bc70:· | 0003bc70:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bc80:· | 0003bc80:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bc90:· | 0003bc90:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bca0:· | 0003bca0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bcb0:· | 0003bcb0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bcc0:·6 | 0003bcc0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bcd0:· | 0003bcd0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003bce0:· | 0003bce0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003bcf0:·7 | 0003bcf0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003bd00:· | 0003bd00:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003bd10:· | 0003bd10:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003bd20:·6 | 0003bd20:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003bd30:·7 | 0003bd30:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| Max diff block lines reached; 21828048/21884380 bytes (99.74%) of diff not shown. | |||
| Offset 15058, 222 lines modified | Offset 15058, 222 lines modified | ||
| 0003ad10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ad10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ad20:·3d22·2369·646d·3536·3936·2220·7461·6269··="#idm5696"·tabi | 0003ad20:·3d22·2369·646d·3536·3936·2220·7461·6269··="#idm5696"·tabi | ||
| 0003ad30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ad30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ad40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ad40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad80:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ad80:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ad90:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ada0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003adb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003adc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003add0:·3d22·6964·6d35·3639·3622·3e3c·7461·626c··="idm5696"><tabl | |||
| 0003ade0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003adf0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ae00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ae10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ae20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ae30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003a | 0003ad90:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003ada0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003adb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003adc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003add0:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ade0:·3639·3622·3e3c·7072·653e·3c63·6f64·653e··696"><pre><code> | |||
| 0003adf0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ae00:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ae10:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ae20:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ae30:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ae40:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ae50:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ae60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ae70:·3536·3937·2220·7461·6269·6e64·6578·3d22··5697"·tabindex=" | |||
| 0003ae80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ae90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003aea0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003aeb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003aec0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003aed0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003aee0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aef0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003af00:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af10:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003af20:·3937·223e·3c74·6162·6c65·2063·6c61·7373··97"><table·class | |||
| 0003af30:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003af40:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003af50:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003af60:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003af70:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a | 0003af80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003af90:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ae70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ae80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ae90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003aea0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003aeb0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003aec0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003aed0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003aee0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003aef0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003af00:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003af10:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003af20:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003af30:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003af40:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003af50:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003af60:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003af70:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003af80:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003af90:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003afa0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003afb0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003afc0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003afd0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003afe0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003aff0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b000:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b010:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b020:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b030:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b040:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b050:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b060:·6865·6e3a·2028·226b·6572·6e65·6c22·2069··hen:·("kernel"·i | |||
| 0003b070:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b080:·7061·636b·6167·6573·206f·7220·226b·6572··packages·or·"ker | |||
| 0003b090:·6e65·6c2d·7565·6b22·2069·6e20·616e·7369··nel-uek"·in·ansi | |||
| 0003b0a0:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b0b0:·6573·290a·2020·7461·6773·3a0a·2020·2d20··es).··tags:.··-· | |||
| 0003b0c0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b0d0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003b0e0:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003b0f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b100:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b110:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b120:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b130:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b140:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b150:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b160:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b170:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b180:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b190:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b1a0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b1b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b1c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b1d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b1e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b200:·6d35·3639·3722·2074·6162·696e·6465·783d··m5697"·tabindex= | |||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b260:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b270:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b280:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b290:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b2a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b2b0:·6522·2069·643d·2269·646d·3536·3937·223e··e"·id="idm5697"> | |||
| 0003b2c0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b2d0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b2e0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b2f0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b300:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| Max diff block lines reached; 22992866/23022150 bytes (99.87%) of diff not shown. | |||
| Offset 15064, 221 lines modified | Offset 15064, 221 lines modified | ||
| 0003ad70:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | 0003ad70:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | ||
| 0003ad80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ada0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ada0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003adb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003adb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003adc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003adc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003add0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003add0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ade0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003adf0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ae00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ae10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a | 0003ade0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003adf0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ae00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae30:·646d·3536·3936·223e·3c70·7265·3e3c·636f··dm5696"><pre><co | |||
| 0003ae40:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae50:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae60:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ae70:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ae | 0003ae80:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003ae40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae80:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae | 0003ae90:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003aea0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003aeb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003aec0:·6964·6d35·3639·3722·2074·6162·696e·6465··idm5697"·tabinde | |||
| 0003aed0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003aee0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aef0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003af00:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003af10:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003af20:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003af30:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003af40:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003af50:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003af60:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003af70:·6d35·3639·3722·3e3c·7461·626c·6520·636c··m5697"><table·cl | |||
| 0003af80:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003af90:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003afa0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003afb0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003afc0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a | 0003afd0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003afe0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003aec0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003aed0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003aee0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003aef0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003af00:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003af10:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003af20:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003af30:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003af40:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003af50:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003af60:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003af70:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003af80:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003af90:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003afa0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003afb0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003afc0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003afd0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003afe0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003aff0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b000:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b010:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b020:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b030:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b040:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b050:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b060:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b070:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b080:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b090:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b0a0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b0b0:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b0c0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b0d0:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b0e0:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b0f0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b100:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b110:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b120:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b130:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003b140:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b150:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b160:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b170:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b180:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b190:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b1a0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b1b0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b1c0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b1d0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b1e0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b1f0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b200:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b210:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b220:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b230:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b240:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b250:·2369·646d·3536·3937·2220·7461·6269·6e64··#idm5697"·tabind | |||
| 0003b260:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b270:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b280:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b290:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b2a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2b0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b2c0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b2d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b2e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b2f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b300:·6170·7365·2220·6964·3d22·6964·6d35·3639··apse"·id="idm569 | |||
| 0003b310:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b320:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b330:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b340:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b350:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b360:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b370:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b380:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| Max diff block lines reached; 23299247/23328393 bytes (99.88%) of diff not shown. | |||
| Offset 15054, 221 lines modified | Offset 15054, 221 lines modified | ||
| 0003acd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003acd0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ace0:·6964·6d35·3639·3622·2074·6162·696e·6465··idm5696"·tabinde | 0003ace0:·6964·6d35·3639·3622·2074·6162·696e·6465··idm5696"·tabinde | ||
| 0003acf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003acf0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ad00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ad00:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ad10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ad10:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ad20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ad20:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ad30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ad30:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ad40:·656d·6564·6961·7469·6f6e·204 | 0003ad40:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003ad50:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ad60:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad70:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad80:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad90:·646d·3536·3936·223e·3c74·6162·6c65·2063··dm5696"><table·c | |||
| 0003ada0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003adb0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003adc0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003add0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ade0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003adf0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003a | 0003ad50:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003ad60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ad70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad90:·7073·6522·2069·643d·2269·646d·3536·3936··pse"·id="idm5696 | |||
| 0003ada0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003adb0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003adc0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003add0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ade0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003adf0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ae00:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ae10:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ae20:·2d74·6172·6765·743d·2223·6964·6d35·3639··-target="#idm569 | |||
| 0003ae30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | |||
| 0003ae40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ae50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ae60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ae70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ae80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ae90:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003aea0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003aeb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003aec0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003aed0:·7365·2220·6964·3d22·6964·6d35·3639·3722··se"·id="idm5697" | |||
| 0003aee0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003aef0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003af00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003af10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003af20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003a | 0003af30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003a | 0003af40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003af50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ae30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ae40:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003ae50:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003ae60:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003ae70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003ae80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae90:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003aea0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003aeb0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003aec0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003aed0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003aee0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003aef0:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003af00:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003af10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003af40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003af50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003af60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003af70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003af80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003af90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003afa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003afb0:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003afc0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003afd0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003afe0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003aff0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b000:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b010:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b020:·3a20·2822·6b65·726e·656c·2220·696e·2061··:·("kernel"·in·a | |||
| 0003b030:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b040:·6b61·6765·7320·6f72·2022·6b65·726e·656c··kages·or·"kernel | |||
| 0003b050:·2d75·656b·2220·696e·2061·6e73·6962·6c65··-uek"·in·ansible | |||
| 0003b060:·5f66·6163·7473·2e70·6163·6b61·6765·7329··_facts.packages) | |||
| 0003b070:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b080:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b090:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b0a0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b0b0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b0c0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b0d0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b0e0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b0f0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b100:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b110:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b120:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b130:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b140:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b150:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b160:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b170:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b180:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b190:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b1a0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b1b0:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b1c0:·3937·2220·7461·6269·6e64·6578·3d22·3022··97"·tabindex="0" | |||
| 0003b1d0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b1e0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b1f0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b200:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b210:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b220:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b230:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b240:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b250:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b260:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b270:·6964·3d22·6964·6d35·3639·3722·3e3c·7072··id="idm5697"><pr | |||
| 0003b280:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b290:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b2a0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b2b0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b2c0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2d0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| Max diff block lines reached; 9995026/10024172 bytes (99.71%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 53 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 144 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 145 | ····yum·install·-y·"aide" | ||
| 146 | fi | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 161 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 162 | ··package_facts: |
| Offset 153, 53 lines modified | Offset 192, 14 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 194 | ··-·low_complexity |
| 156 | ··-·low_disruption | 195 | ··-·low_disruption |
| 157 | ··-·medium_severity | 196 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 171 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 172 | ····yum·install·-y·"aide" | ||
| 173 | fi | ||
| 174 | else | ||
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 176 | fi | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | include·install_aide | ||
| 183 | class·install_aide·{ | ||
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 225, 14 lines modified | Offset 225, 28 lines modified | ||
| 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 225 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 228 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 231 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 232 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 233 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 234 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 235 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 236 | ····yum·install·-y·"aide" | ||
| 237 | fi | ||
| 238 | /usr/sbin/aide·--init | ||
| 239 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 240 | else | ||
| Max diff block lines reached; 1073119/1078130 bytes (99.54%) of diff not shown. | |||
| Offset 14725, 228 lines modified | Offset 14725, 228 lines modified | ||
| 00039840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00039840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00039850:·646d·3130·3539·3722·2074·6162·696e·6465··dm10597"·tabinde | 00039850:·646d·3130·3539·3722·2074·6162·696e·6465··dm10597"·tabinde | ||
| 00039860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00039860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00039870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00039870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00039880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00039880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00039890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00039890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000398a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000398a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000398b0:·656d·6564·6961·7469·6f6e·204 | 000398b0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 000398c0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 000398d0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 000398e0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 000398f0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039900:·7073·6522·2069·643d·2269·646d·3130·3539··pse"·id="idm1059 | |||
| 00039910:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 00039920:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000398c0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 000398d0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000398e0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000398f0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00039900:·646d·3130·3539·3722·3e3c·7461·626c·6520··dm10597"><table· | |||
| 00039910:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039920:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039930:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039940:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039950:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039960:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039970:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039980:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039990:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000399a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 000399b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 000399c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000399d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 000399e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 000399f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00039a00:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 00039a10:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 00039a20:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 00039a30:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 00039a40:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 00039a50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 00039a60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00039a70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00039a80:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00039a90:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00039aa0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00039ab0:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 00039ac0:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 00039ad0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 00039 | 00039930:·203d·2022·646e·662d·6175·746f·6d61·7469···=·"dnf-automati | ||
| 00039940:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039950:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00039960:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00039970:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00039980:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00039af0:·6320·6973·2069·6e73·7461·6c6c·6564·0a20··c·is·installed.· | |||
| 00039b00:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00039b10:·6d65·3a20·646e·662d·6175·746f·6d61·7469··me:·dnf-automati | |||
| 00039b20:·630a·2020·2020·7374·6174·653a·2070·7265··c.····state:·pre | |||
| 00039b30:·7365·6e74·0a20·2077·6865·6e3a·206e·6f74··sent.··when:·not | |||
| 00039b40:·2028·2022·6b65·726e·656c·2220·696e·2061···(·"kernel"·in·a | |||
| 00039b50:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 00039b60:·6b61·6765·7320·616e·6420·2272·706d·2d6f··kages·and·"rpm-o | |||
| 00039b70:·7374·7265·6522·2069·6e20·616e·7369·626c··stree"·in·ansibl | |||
| 00039b80:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00039b90:·0a20·2020·2061·6e64·2022·626f·6f74·6322··.····and·"bootc" | |||
| 00039ba0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 00039bb0:·732e·7061·636b·6167·6573·2061·6e64·206e··s.packages·and·n | |||
| 00039bc0:·6f74·2022·6f70·656e·7368·6966·742d·6b75··ot·"openshift-ku | |||
| 00039bd0:·6265·6c65·7422·2069·6e20·616e·7369·626c··belet"·in·ansibl | |||
| 00039be0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 00039bf0:·0a20·2020·2029·0a20·2074·6167·733a·0a20··.····).··tags:.· | |||
| 00039c00:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00039c10:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00039c20:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00039c30:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 00039c40:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00039c50:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 00039c60:·640a·2020·2d20·7061·636b·6167·655f·646e··d.··-·package_dn | |||
| 00039c70:·662d·6175·746f·6d61·7469·635f·696e·7374··f-automatic_inst | |||
| 00039c80:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00039c90:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00039ca0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00039 | 00039990:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 000399a0:·743d·2223·6964·6d31·3035·3938·2220·7461··t="#idm10598"·ta | |||
| 000399b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000399c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000399d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000399e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000399f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00039a00:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00039cc0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00039cd0:·7461·7267·6574·3d22·2369·646d·3130·3539··target="#idm1059 | |||
| 00039ce0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 00039cf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00039d00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00039d10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00039d20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00039d30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00039d40:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00039 | 00039a10:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 00039 | 00039a20:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00039 | 00039a30:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00039 | 00039a40:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00039 | 00039a50:·643d·2269·646d·3130·3539·3822·3e3c·7461··d="idm10598"><ta | ||
| 00039da0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00039db0:·6765·735d·5d0a·6e61·6d65·203d·2022·646e··ges]].name·=·"dn | |||
| 00039dc0:·662d·6175·746f·6d61·7469·6322·0a76·6572··f-automatic".ver | |||
| 00039 | 00039a60:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 00039a70:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00039a80:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00039a90:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00039aa0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00039ab0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00039ac0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039ad0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00039ae0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039af0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00039b00:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00039b10:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00039b20:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00039b30:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00039b40:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00039b50:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 00039b60:·7461·6c6c·5f64·6e66·2d61·7574·6f6d·6174··tall_dnf-automat | |||
| 00039b70:·6963·0a0a·636c·6173·7320·696e·7374·616c··ic..class·instal | |||
| 00039b80:·6c5f·646e·662d·6175·746f·6d61·7469·6320··l_dnf-automatic· | |||
| Max diff block lines reached; 3832097/3862209 bytes (99.22%) of diff not shown. | |||
| Offset 81, 50 lines modified | Offset 81, 31 lines modified | ||
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 93 | -·name:·Gather·the·package·facts | ||
| 94 | ··package_facts: | ||
| 95 | ····manager:·auto | ||
| 96 | ··tags: | ||
| 97 | ··-·enable_strategy | ||
| 98 | ··-·low_complexity | ||
| 99 | ··-·low_disruption | ||
| 100 | ··-·medium_severity | ||
| 101 | ··-·no_reboot_needed | ||
| 102 | ··-·package_dnf-automatic_installed | ||
| 103 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 104 | ··package: | ||
| 105 | ····name:·dnf-automatic | ||
| 106 | ····state:·present | ||
| 107 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 108 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 109 | ansible_facts.packages | ||
| 110 | ····) | ||
| 111 | ··tags: | ||
| 112 | ··-·enable_strategy | ||
| 113 | ··-·low_complexity | ||
| 114 | ··-·low_disruption | ||
| 115 | ··-·medium_severity | ||
| 116 | ··-·no_reboot_needed | ||
| 117 | ··-·package_dnf-automatic_installed | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | [[packages]] | 89 | [[packages]] |
| 120 | name·=·"dnf-automatic" | 90 | name·=·"dnf-automatic" |
| 121 | version·=·"*" | 91 | version·=·"*" |
| 92 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 93 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 94 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 95 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 96 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 97 | include·install_dnf-automatic | ||
| 98 | class·install_dnf-automatic·{ | ||
| 99 | ··package·{·'dnf-automatic': | ||
| 100 | ····ensure·=>·'installed', | ||
| 101 | ··} | ||
| 102 | } | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | #·Remediation·is·applicable·only·in·certain·platforms | 108 | #·Remediation·is·applicable·only·in·certain·platforms |
| 128 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 133, 33 lines modified | Offset 114, 52 lines modified | ||
| 133 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 114 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 134 | ····yum·install·-y·"dnf-automatic" | 115 | ····yum·install·-y·"dnf-automatic" |
| 135 | fi | 116 | fi |
| 136 | else | 117 | else |
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 138 | fi | 119 | fi |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | include·install_dnf-automatic | ||
| 145 | class·install_dnf-automatic·{ | ||
| 146 | 125 | package·--add=dnf-automatic | |
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | } | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Gather·the·package·facts | ||
| 132 | ··package_facts: | ||
| 133 | ····manager:·auto | ||
| 134 | ··tags: | ||
| 135 | ··-·enable_strategy | ||
| 136 | ··-·low_complexity | ||
| 137 | ··-·low_disruption | ||
| 138 | ··-·medium_severity | ||
| 139 | ··-·no_reboot_needed | ||
| 140 | ··-·package_dnf-automatic_installed | ||
| 155 | 141 | -·name:·Ensure·dnf-automatic·is·installed | |
| 142 | ··package: | ||
| 143 | ····name:·dnf-automatic | ||
| 144 | ····state:·present | ||
| 145 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 146 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 147 | ansible_facts.packages | ||
| 148 | ····) | ||
| 149 | ··tags: | ||
| 150 | ··-·enable_strategy | ||
| 151 | ··-·low_complexity | ||
| 152 | ··-·low_disruption | ||
| 153 | ··-·medium_severity | ||
| 154 | ··-·no_reboot_needed | ||
| 155 | ··-·package_dnf-automatic_installed | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 159 | automatic.conf. | 159 | automatic.conf. |
| 160 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 160 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 161 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 161 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 162 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 162 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 169, 54 lines modified | Offset 169, 14 lines modified | ||
| 169 | Severity: ··medium | 169 | Severity: ··medium |
| 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 170 | Rule·ID:····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 171 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 171 | ············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 172 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 172 | ············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 173 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 173 | References:·_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 174 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 174 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| Max diff block lines reached; 254610/259646 bytes (98.06%) of diff not shown. | |||
| Offset 15098, 221 lines modified | Offset 15098, 221 lines modified | ||
| 0003af90:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | 0003af90:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | ||
| 0003afa0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003afa0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003afb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003afb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003afc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003afc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003afd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003afd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003afe0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003afe0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aff0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aff0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b000:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b010:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b020:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b030:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b040:·6522·2069·643d·2269·646d·3536·3936·223e··e"·id="idm5696"> | |||
| 0003b050:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b060:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b070:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b080:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b090:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b0a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b0b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0 | 0003b000:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b010:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b020:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b030:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b040:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b050:·2269·646d·3536·3936·223e·3c70·7265·3e3c··"idm5696"><pre>< | |||
| 0003b060:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b070:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b080:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b090:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b0a0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b0b0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b0c0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b0d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b0e0:·2223·6964·6d35·3639·3722·2074·6162·696e··"#idm5697"·tabin | |||
| 0003b0f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b100:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b110:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b120:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b130:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b140:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b150:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b190:·6964·6d35·3639·3722·3e3c·7461·626c·6520··idm5697"><table· | |||
| 0003b1a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b1f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b200:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b0f0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b100:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b110:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b120:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b130:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b140:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b150:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b160:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b170:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b180:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b190:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b1a0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b1b0:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b1c0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b1d0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b1e0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b1f0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b200:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b210:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b220:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b230:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b240:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b250:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b260:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b270:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b280:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b290:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b2a0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b2b0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b2c0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b2d0:·740a·2020·7768·656e·3a20·2822·6b65·726e··t.··when:·("kern | |||
| 0003b2e0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b2f0:·6163·7473·2e70·6163·6b61·6765·7320·6f72··acts.packages·or | |||
| 0003b300:·2022·6b65·726e·656c·2d75·656b·2220·696e···"kernel-uek"·in | |||
| 0003b310:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b320:·6163·6b61·6765·7329·0a20·2074·6167·733a··ackages).··tags: | |||
| 0003b330:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b340:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b350:·2d4f·4c30·382d·3030·2d30·3130·3335·390a··-OL08-00-010359. | |||
| 0003b360:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b370:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b380:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b390:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b3a0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b3b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b3c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b3d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b3e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b3f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b400:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b410:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b420:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b430:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b440:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b450:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b460:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b470:·3d22·2369·646d·3536·3937·2220·7461·6269··="#idm5697"·tabi | |||
| 0003b480:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b490:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b4a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b4b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b4c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b4d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b4e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b4f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b500:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b510:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b520:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b530:·3639·3722·3e3c·7072·653e·3c63·6f64·653e··697"><pre><code> | |||
| 0003b540:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b550:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b560:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b570:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b580:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b590:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| Max diff block lines reached; 9784551/9813697 bytes (99.70%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 53 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | include·install_aide | ||
| 125 | class·install_aide·{ | ||
| 126 | ··package·{·'aide': | ||
| 127 | ····ensure·=>·'installed', | ||
| 128 | ··} | ||
| 129 | } | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 136 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 137 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 138 | ····yum·install·-y·"aide" | ||
| 139 | fi | ||
| 140 | else | ||
| 141 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 142 | fi | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=aide | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | -·name:·Gather·the·package·facts | 154 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 155 | ··package_facts: |
| Offset 146, 53 lines modified | Offset 185, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 185 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 186 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 187 | ··-·low_complexity |
| 149 | ··-·low_disruption | 188 | ··-·low_disruption |
| 150 | ··-·medium_severity | 189 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 190 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 191 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 163 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 165 | ····yum·install·-y·"aide" | ||
| 166 | fi | ||
| 167 | else | ||
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 169 | fi | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | include·install_aide | ||
| 176 | class·install_aide·{ | ||
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·--add=aide | ||
| 187 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 192 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 188 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 193 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 189 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 194 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 190 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 195 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 208, 14 lines modified | Offset 208, 27 lines modified | ||
| 208 | ············_\x8i_\x8s_\x8m······1446 | 208 | ············_\x8i_\x8s_\x8m······1446 |
| 209 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 211 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 212 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 213 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 213 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 214 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 218 | fips-mode-setup·--enable | ||
| 219 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 220 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 221 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 222 | fi | ||
| 223 | else | ||
| 224 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| Max diff block lines reached; 1178344/1184110 bytes (99.51%) of diff not shown. | |||
| Offset 15137, 408 lines modified | Offset 15137, 408 lines modified | ||
| 0003b200:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b200:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b210:·6d35·3335·3922·2074·6162·696e·6465·783d··m5359"·tabindex= | 0003b210:·6d35·3335·3922·2074·6162·696e·6465·783d··m5359"·tabindex= | ||
| 0003b220:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b220:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b230:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b230:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b240:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b240:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b250:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b250:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b260:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b260:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b270:·6564·6961·7469·6f6e·20 | 0003b270:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b280:· | 0003b280:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b290:·3 | 0003b290:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b2a0:· | 0003b2a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b2b0:·6 | 0003b2b0:·6170·7365·2220·6964·3d22·6964·6d35·3335··apse"·id="idm535 | ||
| 0003b2c0:·3 | 0003b2c0:·3922·3e3c·7072·653e·3c63·6f64·653e·2320··9"><pre><code>#· | ||
| 0003b2d0:· | 0003b2d0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b2e0:·7 | 0003b2e0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b2f0:· | 0003b2f0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b300:· | 0003b300:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b310:· | 0003b310:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b320:· | 0003b320:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b330:· | 0003b330:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b340:·7 | 0003b340:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b350:· | 0003b350:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b360:· | 0003b360:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b370:·6 | 0003b370:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b380:· | 0003b380:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b390:· | 0003b390:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b3a0:·65 | 0003b3a0:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b3b0:· | 0003b3b0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b3c0:·6 | 0003b3c0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b3d0:·6 | 0003b3d0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b3e0:· | 0003b3e0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b3f0:·6 | 0003b3f0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b400:·7 | 0003b400:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b410:·2 | 0003b410:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b420:· | 0003b420:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b430:· | 0003b430:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b440:· | 0003b440:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b450:·2 | 0003b450:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b460:· | 0003b460:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b470:· | 0003b470:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b480:·2 | 0003b480:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b490:· | 0003b490:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b4a0:· | 0003b4a0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b4b0:· | 0003b4b0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b4c0:· | 0003b4c0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b4d0:· | 0003b4d0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b4e0:· | 0003b4e0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b4f0:·3 | 0003b4f0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003b500:· | 0003b500:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003b510:·6 | 0003b510:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003b520:·6 | 0003b520:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003b530:· | 0003b530:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003b540:· | 0003b540:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003b550:· | 0003b550:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b560:·7 | 0003b560:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003b570:·2 | 0003b570:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | ||
| 0003b580:· | 0003b580:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | ||
| 0003b590:· | 0003b590:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003b5a0:· | 0003b5a0:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003b5b0:· | 0003b5b0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003b5c0:· | 0003b5c0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003b5d0:·6 | 0003b5d0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003b5e0:· | 0003b5e0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003b5f0:·6 | 0003b5f0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003b600:·6 | 0003b600:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b610:· | 0003b610:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b620:· | 0003b620:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b630:·6 | 0003b630:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b640:·206 | 0003b640:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b650:· | 0003b650:·646d·3533·3630·2220·7461·6269·6e64·6578··dm5360"·tabindex | ||
| 0003b660:· | 0003b660:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b670:· | 0003b670:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b680:· | 0003b680:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b690:· | 0003b690:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b6a0:· | 0003b6a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b6b0:· | 0003b6b0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b6c0:· | 0003b6c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b6d0:· | 0003b6d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b6e0:· | 0003b6e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b6f0:· | 0003b6f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b700:·6 | 0003b700:·6d35·3336·3022·3e3c·7461·626c·6520·636c··m5360"><table·cl | ||
| 0003b710:·61 | 0003b710:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b720:· | 0003b720:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b730:· | 0003b730:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b740:· | 0003b740:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b750:· | 0003b750:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b760:·3 | 0003b760:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b770:· | 0003b770:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b780:· | 0003b780:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b790:· | 0003b790:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b7a0:· | 0003b7a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b7b0:· | 0003b7b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b7c0:·3 | 0003b7c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b7d0:· | 0003b7d0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b7e0:· | 0003b7e0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b7f0:·7 | 0003b7f0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b800:· | 0003b800:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003b810:·686 | 0003b810:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003b820:· | 0003b820:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003b830:· | 0003b830:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003b840:· | 0003b840:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003b850:· | 0003b850:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b860:·2 | 0003b860:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b870:· | 0003b870:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b880:· | 0003b880:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b890:· | 0003b890:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b8a0:· | 0003b8a0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b8b0:· | 0003b8b0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b8c0:· | 0003b8c0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b8d0:· | 0003b8d0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b8e0:·5 | 0003b8e0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b8f0:· | 0003b8f0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b900:· | 0003b900:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b910:· | 0003b910:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b920:· | 0003b920:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b930:· | 0003b930:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b940:·2 | 0003b940:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b950:· | 0003b950:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b960:·6 | 0003b960:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b970:·2 | 0003b970:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b980:·6 | 0003b980:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b990:·7 | 0003b990:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b9a0:· | 0003b9a0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b9b0:·20 | 0003b9b0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b9c0:· | 0003b9c0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b9d0:· | 0003b9d0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| Max diff block lines reached; 6444981/6499933 bytes (99.15%) of diff not shown. | |||
| Offset 102, 14 lines modified | Offset 102, 33 lines modified | ||
| 102 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 102 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 103 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 103 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 104 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 105 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 107 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 110 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 111 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 112 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 113 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 114 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 115 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 116 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 117 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 118 | fi | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 114 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 115 | ··package_facts: | 128 | ··package_facts: |
| Offset 276, 33 lines modified | Offset 295, 14 lines modified | ||
| 276 | ··-·PCI-DSSv4-11.5.2 | 295 | ··-·PCI-DSSv4-11.5.2 |
| 277 | ··-·high_complexity | 296 | ··-·high_complexity |
| 278 | ··-·high_severity | 297 | ··-·high_severity |
| 279 | ··-·medium_disruption | 298 | ··-·medium_disruption |
| 280 | ··-·no_reboot_needed | 299 | ··-·no_reboot_needed |
| 281 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 282 | ··-·rpm_verify_hashes | 301 | ··-·rpm_verify_hashes |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 285 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 286 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 287 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 288 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 289 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 290 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 291 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 292 | fi | ||
| 293 | else | ||
| 294 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 295 | fi | ||
| 296 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 297 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 303 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 298 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 304 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 299 | run·the·following·command·to·determine·which·package·owns·it: | 305 | run·the·following·command·to·determine·which·package·owns·it: |
| 300 | $·rpm·-qf·FILENAME | 306 | $·rpm·-qf·FILENAME |
| 301 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 302 | $·sudo·rpm·--restore·PACKAGENAME | 308 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 321, 14 lines modified | Offset 321, 46 lines modified | ||
| 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 321 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 323 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 325 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 327 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 333 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 334 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 335 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 336 | declare·-A·SETPERMS_RPM_DICT | ||
| 337 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 338 | #·is·expected·by·the·RPM·database | ||
| 339 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 340 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 341 | do | ||
| 342 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 343 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 344 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 345 | done | ||
| 346 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 347 | #·correct·values | ||
| 348 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 349 | do | ||
| 350 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 351 | done | ||
| 352 | else | ||
| 353 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 354 | fi | ||
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 330 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 331 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 332 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 333 | -·name:·Gather·the·package·facts | 360 | -·name:·Gather·the·package·facts |
| 334 | ··package_facts: | 361 | ··package_facts: |
| Offset 436, 46 lines modified | Offset 468, 14 lines modified | ||
| 436 | ··-·PCI-DSSv4-11.5.2 | 468 | ··-·PCI-DSSv4-11.5.2 |
| 437 | ··-·high_complexity | 469 | ··-·high_complexity |
| 438 | ··-·high_severity | 470 | ··-·high_severity |
| 439 | ··-·medium_disruption | 471 | ··-·medium_disruption |
| 440 | ··-·no_reboot_needed | 472 | ··-·no_reboot_needed |
| 441 | ··-·restrict_strategy | 473 | ··-·restrict_strategy |
| 442 | ··-·rpm_verify_ownership | 474 | ··-·rpm_verify_ownership |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 687467/695178 bytes (98.89%) of diff not shown. | |||
| Offset 15162, 408 lines modified | Offset 15162, 408 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3539·2220·7461·6269·6e64·6578·3d22··5359"·tabindex=" | 0003b3a0:·3533·3539·2220·7461·6269·6e64·6578·3d22··5359"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003b410:·7 | 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b420:· | 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b430:·6 | 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b440:· | 0003b440:·7073·6522·2069·643d·2269·646d·3533·3539··pse"·id="idm5359 | ||
| 0003b450:· | 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 0003b460:· | 0003b460:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b470:·7 | 0003b470:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b480:· | 0003b480:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 0003b490:·6 | 0003b490:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | ||
| 0003b4a0:· | 0003b4a0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | ||
| 0003b4b0:· | 0003b4b0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | ||
| 0003b4c0:· | 0003b4c0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b4d0:· | 0003b4d0:·2072·706d·2d6f·7374·7265·6520·3b7d·2026···rpm-ostree·;}·& | ||
| 0003b4e0:·6 | 0003b4e0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b4f0:· | 0003b4f0:·2d2d·7175·6965·7420·2d71·2062·6f6f·7463··--quiet·-q·bootc | ||
| 0003b500:· | 0003b500:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b510:·2 | 0003b510:·2021·2072·706d·202d·2d71·7569·6574·202d···!·rpm·--quiet·- | ||
| 0003b520:·7 | 0003b520:·7120·6f70·656e·7368·6966·742d·6b75·6265··q·openshift-kube | ||
| 0003b530:· | 0003b530:·6c65·7420·3b7d·2029·3b20·7468·656e·0a0a··let·;}·);·then.. | ||
| 0003b540:· | 0003b540:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | ||
| 0003b550:·6 | 0003b550:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | ||
| 0003b560:·7 | 0003b560:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | ||
| 0003b570:·6 | 0003b570:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | ||
| 0003b580:· | 0003b580:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | ||
| 0003b590:· | 0003b590:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | ||
| 0003b5a0:·20 | 0003b5a0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | ||
| 0003b5b0:· | 0003b5b0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | ||
| 0003b5c0:· | 0003b5c0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b5d0:· | 0003b5d0:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | ||
| 0003b5e0:·2 | 0003b5e0:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | ||
| 0003b5f0:· | 0003b5f0:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | ||
| 0003b600:· | 0003b600:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | ||
| 0003b610:·2 | 0003b610:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | ||
| 0003b620:· | 0003b620:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b630:· | 0003b630:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | ||
| 0003b640:· | 0003b640:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | ||
| 0003b650:·2 | 0003b650:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | ||
| 0003b660:· | 0003b660:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | ||
| 0003b670:· | 0003b670:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | ||
| 0003b680:· | 0003b680:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | ||
| 0003b690:· | 0003b690:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | ||
| 0003b6a0:·6 | 0003b6a0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | ||
| 0003b6b0:·6 | 0003b6b0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | ||
| 0003b6c0:·6 | 0003b6c0:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | ||
| 0003b6d0:· | 0003b6d0:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | ||
| 0003b6e0:· | 0003b6e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b6f0:·6 | 0003b6f0:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | ||
| 0003b700:·20 | 0003b700:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | ||
| 0003b710:· | 0003b710:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | ||
| 0003b720:· | 0003b720:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b730:·616 | 0003b730:·616c·6c0a·2020·2020·0a66·690a·0a65·6c73··all.····.fi..els | ||
| 0003b740:· | 0003b740:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | ||
| 0003b750:· | 0003b750:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | ||
| 0003b760:·6 | 0003b760:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | ||
| 0003b770:·616 | 0003b770:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | ||
| 0003b780:· | 0003b780:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | ||
| 0003b790:· | 0003b790:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b7a0:· | 0003b7a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b7b0:· | 0003b7b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b7c0:·6 | 0003b7c0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b7d0:·6 | 0003b7d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b7e0:· | 0003b7e0:·6d35·3336·3022·2074·6162·696e·6465·783d··m5360"·tabindex= | ||
| 0003b7f0:· | 0003b7f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b800:· | 0003b800:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b810:· | 0003b810:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b820:·6 | 0003b820:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b830:·6 | 0003b830:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b840:· | 0003b840:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b850:·20 | 0003b850:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b860:· | 0003b860:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b870:· | 0003b870:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b880:· | 0003b880:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b890:· | 0003b890:·3533·3630·223e·3c74·6162·6c65·2063·6c61··5360"><table·cla | ||
| 0003b8a0:· | 0003b8a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b8b0:· | 0003b8b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b8c0:· | 0003b8c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b8d0:· | 0003b8d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b8e0:· | 0003b8e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b8f0:· | 0003b8f0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b900:· | 0003b900:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b910:· | 0003b910:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b920:· | 0003b920:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b930:· | 0003b930:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b940:· | 0003b940:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b950:· | 0003b950:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b960:· | 0003b960:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b970:· | 0003b970:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b980:· | 0003b980:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b990:· | 0003b990:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b9a0:·6 | 0003b9a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b9b0:· | 0003b9b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b9c0:· | 0003b9c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b9d0:·7 | 0003b9d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b9e0:· | 0003b9e0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b9f0:· | 0003b9f0:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003ba00:· | 0003ba00:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003ba10:·5 | 0003ba10:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003ba20:·202 | 0003ba20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba30:· | 0003ba30:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003ba40:· | 0003ba40:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003ba50:· | 0003ba50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba60:· | 0003ba60:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003ba70:· | 0003ba70:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003ba80:· | 0003ba80:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003ba90:· | 0003ba90:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003baa0:· | 0003baa0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bab0:·2 | 0003bab0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003bac0:· | 0003bac0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bad0:· | 0003bad0:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bae0:·6 | 0003bae0:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003baf0:·6 | 0003baf0:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bb00:· | 0003bb00:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bb10:·6 | 0003bb10:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bb20:· | 0003bb20:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bb30:·69 | 0003bb30:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bb40:· | 0003bb40:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bb50:·6 | 0003bb50:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bb60:· | 0003bb60:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| Max diff block lines reached; 17330203/17385155 bytes (99.68%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 33 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 125 | else | ||
| 126 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 127 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 134 | ··package_facts: |
| Offset 282, 33 lines modified | Offset 301, 14 lines modified | ||
| 282 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 283 | ··-·high_complexity | 302 | ··-·high_complexity |
| 284 | ··-·high_severity | 303 | ··-·high_severity |
| 285 | ··-·medium_disruption | 304 | ··-·medium_disruption |
| 286 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 287 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 288 | ··-·rpm_verify_hashes | 307 | ··-·rpm_verify_hashes |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 292 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 293 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 294 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 295 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 296 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 297 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 298 | fi | ||
| 299 | else | ||
| 300 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 301 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 308 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 309 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 304 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 310 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 305 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 311 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 306 | $·rpm·-qf·FILENAME | 312 | $·rpm·-qf·FILENAME |
| 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 313 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 329, 14 lines modified | Offset 329, 50 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 351 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 352 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 353 | ········do | ||
| 354 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 355 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 356 | ········done | ||
| 357 | done | ||
| 358 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 359 | #·correct·values | ||
| 360 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 361 | do | ||
| 362 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 363 | done | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 341 | -·name:·Gather·the·package·facts | 372 | -·name:·Gather·the·package·facts |
| 342 | ··package_facts: | 373 | ··package_facts: |
| Offset 448, 50 lines modified | Offset 484, 14 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 484 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·high_complexity | 485 | ··-·high_complexity |
| 450 | ··-·high_severity | 486 | ··-·high_severity |
| 451 | ··-·medium_disruption | 487 | ··-·medium_disruption |
| 452 | ··-·no_reboot_needed | 488 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 489 | ··-·restrict_strategy |
| 454 | ··-·rpm_verify_permissions | 490 | ··-·rpm_verify_permissions |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1339414/1347498 bytes (99.40%) of diff not shown. | |||
| Offset 15178, 408 lines modified | Offset 15178, 408 lines modified | ||
| 0003b490:·6765·743d·2223·6964·6d35·3335·3922·2074··get="#idm5359"·t | 0003b490:·6765·743d·2223·6964·6d35·3335·3922·2074··get="#idm5359"·t | ||
| 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b4a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b4b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b4c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b4d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b4e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b4f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b500:·20 | 0003b500:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003b510:· | 0003b510:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b520:· | 0003b520:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b530:· | 0003b530:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b540:· | 0003b540:·3d22·6964·6d35·3335·3922·3e3c·7072·653e··="idm5359"><pre> | ||
| 0003b550:· | 0003b550:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003b560:·6 | 0003b560:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003b570:· | 0003b570:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003b580:·6 | 0003b580:·6e20·706c·6174·666f·726d·730a·6966·2021··n·platforms.if·! | ||
| 0003b590:· | 0003b590:·2028·207b·2072·706d·202d·2d71·7569·6574···(·{·rpm·--quiet | ||
| 0003b5a0:· | 0003b5a0:·202d·7120·6b65·726e·656c·203b·7d20·2661···-q·kernel·;}·&a | ||
| 0003b5b0:·3 | 0003b5b0:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b5c0:· | 0003b5c0:·2d71·7569·6574·202d·7120·7270·6d2d·6f73··-quiet·-q·rpm-os | ||
| 0003b5d0:· | 0003b5d0:·7472·6565·203b·7d20·2661·6d70·3b26·616d··tree·;}·&&am | ||
| 0003b5e0:· | 0003b5e0:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003b5f0:· | 0003b5f0:·202d·7120·626f·6f74·6320·3b7d·2026·616d···-q·bootc·;}·&am | ||
| 0003b600:· | 0003b600:·703b·2661·6d70·3b20·7b20·2120·7270·6d20··p;&·{·!·rpm· | ||
| 0003b610:· | 0003b610:·2d2d·7175·6965·7420·2d71·206f·7065·6e73··--quiet·-q·opens | ||
| 0003b620:· | 0003b620:·6869·6674·2d6b·7562·656c·6574·203b·7d20··hift-kubelet·;}· | ||
| 0003b630:·2 | 0003b630:·293b·2074·6865·6e0a·0a23·2046·696e·6420··);·then..#·Find· | ||
| 0003b640:· | 0003b640:·7768·6963·6820·6669·6c65·7320·6861·7665··which·files·have | ||
| 0003b650:· | 0003b650:·2069·6e63·6f72·7265·6374·2068·6173·6820···incorrect·hash· | ||
| 0003b660:· | 0003b660:·286e·6f74·2069·6e20·2f65·7463·2c20·6265··(not·in·/etc,·be | ||
| 0003b670:·6 | 0003b670:·6361·7573·6520·6f66·2074·6865·2073·7973··cause·of·the·sys | ||
| 0003b680:· | 0003b680:·7465·6d20·7265·6c61·7465·6420·636f·6e66··tem·related·conf | ||
| 0003b690:· | 0003b690:·6967·2066·696c·6573·2920·616e·6420·7468··ig·files)·and·th | ||
| 0003b6a0:· | 0003b6a0:·656e·2067·6574·2066·696c·6573·206e·616d··en·get·files·nam | ||
| 0003b6b0:· | 0003b6b0:·6573·0a66·696c·6573·5f77·6974·685f·696e··es.files_with_in | ||
| 0003b6c0:· | 0003b6c0:·636f·7272·6563·745f·6861·7368·3d22·2428··correct_hash="$( | ||
| 0003b6d0:· | 0003b6d0:·7270·6d20·2d56·6120·2d2d·6e6f·636f·6e66··rpm·-Va·--noconf | ||
| 0003b6e0:· | 0003b6e0:·6967·207c·2067·7265·7020·2d45·2027·5e2e··ig·|·grep·-E·'^. | ||
| 0003b6f0:·2 | 0003b6f0:·2e35·2720·7c20·6177·6b20·277b·7072·696e··.5'·|·awk·'{prin | ||
| 0003b700:· | 0003b700:·7420·244e·467d·2720·2922·0a0a·6966·205b··t·$NF}'·)"..if·[ | ||
| 0003b710:·2 | 0003b710:·202d·6e20·2224·6669·6c65·735f·7769·7468···-n·"$files_with | ||
| 0003b720:· | 0003b720:·5f69·6e63·6f72·7265·6374·5f68·6173·6822··_incorrect_hash" | ||
| 0003b730:·534 | 0003b730:·205d·3b20·7468·656e·0a20·2020·2023·2046···];·then.····#·F | ||
| 0003b740:· | 0003b740:·726f·6d20·6669·6c65·7320·6e61·6d65·7320··rom·files·names· | ||
| 0003b750:· | 0003b750:·6765·7420·7061·636b·6167·6520·6e61·6d65··get·package·name | ||
| 0003b760:· | 0003b760:·7320·616e·6420·6368·616e·6765·206e·6577··s·and·change·new | ||
| 0003b770:· | 0003b770:·6c69·6e65·2074·6f20·7370·6163·652c·2062··line·to·space,·b | ||
| 0003b780:· | 0003b780:·6563·6175·7365·2072·706d·2077·7269·7465··ecause·rpm·write | ||
| 0003b790:· | 0003b790:·7320·6561·6368·2070·6163·6b61·6765·2074··s·each·package·t | ||
| 0003b7a0:· | 0003b7a0:·6f20·6e65·7720·6c69·6e65·0a20·2020·2070··o·new·line.····p | ||
| 0003b7b0:· | 0003b7b0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003b7c0:· | 0003b7c0:·7461·6c6c·3d22·2428·7270·6d20·2d71·6620··tall="$(rpm·-qf· | ||
| 0003b7d0:· | 0003b7d0:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b7e0:·2 | 0003b7e0:·7272·6563·745f·6861·7368·207c·2074·7220··rrect_hash·|·tr· | ||
| 0003b7f0:· | 0003b7f0:·275c·6e27·2027·2027·2922·0a0a·2020·2020··'\n'·'·')"..···· | ||
| 0003b800:· | 0003b800:·0a20·2020·2079·756d·2072·6569·6e73·7461··.····yum·reinsta | ||
| 0003b810:·6 | 0003b810:·6c6c·202d·7920·2470·6163·6b61·6765·735f··ll·-y·$packages_ | ||
| 0003b820:· | 0003b820:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003b830:· | 0003b830:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003b840:·6 | 0003b840:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003b850:· | 0003b850:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003b860:·6 | 0003b860:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003b870:· | 0003b870:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003b880:· | 0003b880:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003b890:· | 0003b890:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b8a0:·2 | 0003b8a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b8b0:· | 0003b8b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b8c0:· | 0003b8c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b8d0:· | 0003b8d0:·7267·6574·3d22·2369·646d·3533·3630·2220··rget="#idm5360"· | ||
| 0003b8e0:· | 0003b8e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b8f0:·6 | 0003b8f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b900:·6 | 0003b900:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b910:·20 | 0003b910:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b920:· | 0003b920:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b930:· | 0003b930:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b940:·6 | 0003b940:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b950:· | 0003b950:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b960:· | 0003b960:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b970:· | 0003b970:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b980:· | 0003b980:·2220·6964·3d22·6964·6d35·3336·3022·3e3c··"·id="idm5360">< | ||
| 0003b990:·7 | 0003b990:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b9a0:· | 0003b9a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b9b0:·20 | 0003b9b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b9c0:· | 0003b9c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b9d0:·3 | 0003b9d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b9e0:· | 0003b9e0:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003b9f0:· | 0003b9f0:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003ba00:· | 0003ba00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003ba10:· | 0003ba10:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003ba20:· | 0003ba20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003ba30:· | 0003ba30:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003ba40:· | 0003ba40:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003ba50:· | 0003ba50:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003ba60:· | 0003ba60:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003ba70:· | 0003ba70:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003ba80:· | 0003ba80:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003ba90:· | 0003ba90:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003baa0:·706 | 0003baa0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003bab0:· | 0003bab0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003bac0:· | 0003bac0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003bad0:· | 0003bad0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | ||
| 0003bae0:· | 0003bae0:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003baf0:· | 0003baf0:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bb00:· | 0003bb00:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bb10:· | 0003bb10:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bb20:· | 0003bb20:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bb30:· | 0003bb30:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bb40:· | 0003bb40:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bb50:· | 0003bb50:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bb60:· | 0003bb60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bb70:· | 0003bb70:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bb80:· | 0003bb80:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bb90:·2 | 0003bb90:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bba0:·2 | 0003bba0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003bbb0:· | 0003bbb0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003bbc0:· | 0003bbc0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003bbd0:· | 0003bbd0:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003bbe0:· | 0003bbe0:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003bbf0:· | 0003bbf0:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003bc00:· | 0003bc00:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003bc10:· | 0003bc10:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003bc20:· | 0003bc20:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003bc30:· | 0003bc30:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003bc40:· | 0003bc40:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003bc50:· | 0003bc50:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| 0003bc60:· | 0003bc60:·2050·6163·6b61·6765·206d·616e·6167·6572···Package·manager | ||
| Max diff block lines reached; 11532580/11587532 bytes (99.53%) of diff not shown. | |||
| Offset 110, 14 lines modified | Offset 110, 33 lines modified | ||
| 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 110 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 111 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 119 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 120 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 121 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 122 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 123 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 124 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 125 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 126 | fi | ||
| 127 | else | ||
| 128 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 129 | fi | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 122 | -·name:·Gather·the·package·facts | 135 | -·name:·Gather·the·package·facts |
| 123 | ··package_facts: | 136 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 307 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 310 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 329, 14 lines modified | Offset 329, 46 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 351 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 352 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 353 | done | ||
| 354 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 355 | #·correct·values | ||
| 356 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 357 | do | ||
| 358 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 359 | done | ||
| 360 | else | ||
| 361 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 362 | fi | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 364 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 365 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 366 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 367 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 341 | -·name:·Gather·the·package·facts | 368 | -·name:·Gather·the·package·facts |
| 342 | ··package_facts: | 369 | ··package_facts: |
| Offset 444, 46 lines modified | Offset 476, 14 lines modified | ||
| 444 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 445 | ··-·high_complexity | 477 | ··-·high_complexity |
| 446 | ··-·high_severity | 478 | ··-·high_severity |
| 447 | ··-·medium_disruption | 479 | ··-·medium_disruption |
| 448 | ··-·no_reboot_needed | 480 | ··-·no_reboot_needed |
| 449 | ··-·restrict_strategy | 481 | ··-·restrict_strategy |
| 450 | ··-·rpm_verify_ownership | 482 | ··-·rpm_verify_ownership |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1112554/1120265 bytes (99.31%) of diff not shown. | |||
| Offset 15073, 221 lines modified | Offset 15073, 221 lines modified | ||
| 0003ae00:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | 0003ae00:·6172·6765·743d·2223·6964·6d35·3639·3622··arget="#idm5696" | ||
| 0003ae10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ae10:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003ae20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003ae20:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ae30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ae30:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ae40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ae40:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ae50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ae50:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ae60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ae60:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ae70:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ae80:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ae90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003aea0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003aeb0:·6522·2069·643d·2269·646d·3536·3936·223e··e"·id="idm5696"> | |||
| 0003aec0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003aed0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aee0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003aef0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003af00:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003af10:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003af20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a | 0003ae70:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003ae80:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ae90:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aea0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aeb0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aec0:·2269·646d·3536·3936·223e·3c70·7265·3e3c··"idm5696"><pre>< | |||
| 0003aed0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003aee0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003aef0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003af00:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003af10:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003af20:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003af30:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003af40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003af50:·2223·6964·6d35·3639·3722·2074·6162·696e··"#idm5697"·tabin | |||
| 0003af60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003af70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003af80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003af90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003afa0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003afb0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003afc0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003afd0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003afe0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003aff0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b000:·6964·6d35·3639·3722·3e3c·7461·626c·6520··idm5697"><table· | |||
| 0003b010:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b020:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b030:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b040:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b050:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003 | 0003b060:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003b070:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003af60:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003af70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003af80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003af90:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003afa0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003afb0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003afc0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003afd0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003afe0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003aff0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b000:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b010:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b020:·5449·472d·4f4c·3038·2d30·302d·3031·3033··TIG-OL08-00-0103 | |||
| 0003b030:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003b040:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b050:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b060:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b070:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b080:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b090:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b0a0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b0b0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b0c0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b0d0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b0e0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b0f0:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b100:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b110:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b120:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b130:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b140:·740a·2020·7768·656e·3a20·2822·6b65·726e··t.··when:·("kern | |||
| 0003b150:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b160:·6163·7473·2e70·6163·6b61·6765·7320·6f72··acts.packages·or | |||
| 0003b170:·2022·6b65·726e·656c·2d75·656b·2220·696e···"kernel-uek"·in | |||
| 0003b180:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b190:·6163·6b61·6765·7329·0a20·2074·6167·733a··ackages).··tags: | |||
| 0003b1a0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b1b0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b1c0:·2d4f·4c30·382d·3030·2d30·3130·3335·390a··-OL08-00-010359. | |||
| 0003b1d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b1e0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b1f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b200:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b210:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b220:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b230:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b240:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b250:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b260:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b270:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b280:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b290:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2a0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b2b0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b2c0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b2d0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b2e0:·3d22·2369·646d·3536·3937·2220·7461·6269··="#idm5697"·tabi | |||
| 0003b2f0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b300:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b310:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b320:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b330:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b340:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b350:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b360:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b370:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b380:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b390:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b3a0:·3639·3722·3e3c·7072·653e·3c63·6f64·653e··697"><pre><code> | |||
| 0003b3b0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b3c0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b3d0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b3e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b3f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b400:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| Max diff block lines reached; 9783447/9812593 bytes (99.70%) of diff not shown. | |||
| Offset 101, 14 lines modified | Offset 101, 53 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | } | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 130 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 131 | ····yum·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 114 | ··package_facts: | 148 | ··package_facts: |
| Offset 139, 53 lines modified | Offset 178, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 178 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 180 | ··-·low_complexity |
| 142 | ··-·low_disruption | 181 | ··-·low_disruption |
| 143 | ··-·medium_severity | 182 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 184 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 156 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 157 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 158 | ····yum·install·-y·"aide" | ||
| 159 | fi | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_aide | ||
| 169 | class·install_aide·{ | ||
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·--add=aide | ||
| 180 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 185 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 181 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 186 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 182 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 187 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 183 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 188 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 201, 14 lines modified | Offset 201, 27 lines modified | ||
| 201 | ············_\x8i_\x8s_\x8m······1446 | 201 | ············_\x8i_\x8s_\x8m······1446 |
| 202 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 202 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 203 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 203 | References:·_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 204 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 204 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 205 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 206 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 206 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 209 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 210 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 211 | fips-mode-setup·--enable | ||
| 212 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 213 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 214 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 215 | fi | ||
| 216 | else | ||
| 217 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| Max diff block lines reached; 1178364/1184130 bytes (99.51%) of diff not shown. | |||
| Offset 15166, 408 lines modified | Offset 15166, 408 lines modified | ||
| 0003b3d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b3d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b3e0:·2369·646d·3533·3539·2220·7461·6269·6e64··#idm5359"·tabind | 0003b3e0:·2369·646d·3533·3539·2220·7461·6269·6e64··#idm5359"·tabind | ||
| 0003b3f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b400:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b410:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b420:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b430:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b440:·5265·6d65·6469·6174·696f·6e20· | 0003b440:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b450:·6 | 0003b450:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003b460:· | 0003b460:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b470:·7 | 0003b470:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b480:·6 | 0003b480:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b490:· | 0003b490:·3533·3539·223e·3c70·7265·3e3c·636f·6465··5359"><pre><code | ||
| 0003b4a0:· | 0003b4a0:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | ||
| 0003b4b0:· | 0003b4b0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | ||
| 0003b4c0:· | 0003b4c0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | ||
| 0003b4d0:· | 0003b4d0:·7466·6f72·6d73·0a69·6620·2120·2820·7b20··tforms.if·!·(·{· | ||
| 0003b4e0:·7 | 0003b4e0:·7270·6d20·2d2d·7175·6965·7420·2d71·206b··rpm·--quiet·-q·k | ||
| 0003b4f0:· | 0003b4f0:·6572·6e65·6c20·3b7d·2026·616d·703b·2661··ernel·;}·&&a | ||
| 0003b500:· | 0003b500:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003b510:·727 | 0003b510:·7420·2d71·2072·706d·2d6f·7374·7265·6520··t·-q·rpm-ostree· | ||
| 0003b520:·3 | 0003b520:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b530:· | 0003b530:·7270·6d20·2d2d·7175·6965·7420·2d71·2062··rpm·--quiet·-q·b | ||
| 0003b540:· | 0003b540:·6f6f·7463·203b·7d20·2661·6d70·3b26·616d··ootc·;}·&&am | ||
| 0003b550:·7 | 0003b550:·703b·207b·2021·2072·706d·202d·2d71·7569··p;·{·!·rpm·--qui | ||
| 0003b560:· | 0003b560:·6574·202d·7120·6f70·656e·7368·6966·742d··et·-q·openshift- | ||
| 0003b570:·6 | 0003b570:·6b75·6265·6c65·7420·3b7d·2029·3b20·7468··kubelet·;}·);·th | ||
| 0003b580:· | 0003b580:·656e·0a0a·2320·4669·6e64·2077·6869·6368··en..#·Find·which | ||
| 0003b590:· | 0003b590:·2066·696c·6573·2068·6176·6520·696e·636f···files·have·inco | ||
| 0003b5a0:· | 0003b5a0:·7272·6563·7420·6861·7368·2028·6e6f·7420··rrect·hash·(not· | ||
| 0003b5b0:·6 | 0003b5b0:·696e·202f·6574·632c·2062·6563·6175·7365··in·/etc,·because | ||
| 0003b5c0:· | 0003b5c0:·206f·6620·7468·6520·7379·7374·656d·2072···of·the·system·r | ||
| 0003b5d0:·6 | 0003b5d0:·656c·6174·6564·2063·6f6e·6669·6720·6669··elated·config·fi | ||
| 0003b5e0:· | 0003b5e0:·6c65·7329·2061·6e64·2074·6865·6e20·6765··les)·and·then·ge | ||
| 0003b5f0:· | 0003b5f0:·7420·6669·6c65·7320·6e61·6d65·730a·6669··t·files·names.fi | ||
| 0003b600:· | 0003b600:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b610:· | 0003b610:·6374·5f68·6173·683d·2224·2872·706d·202d··ct_hash="$(rpm·- | ||
| 0003b620:· | 0003b620:·5661·202d·2d6e·6f63·6f6e·6669·6720·7c20··Va·--noconfig·|· | ||
| 0003b630:· | 0003b630:·6772·6570·202d·4520·275e·2e2e·3527·207c··grep·-E·'^..5'·| | ||
| 0003b640:· | 0003b640:·2061·776b·2027·7b70·7269·6e74·2024·4e46···awk·'{print·$NF | ||
| 0003b650:· | 0003b650:·7d27·2029·220a·0a69·6620·5b20·2d6e·2022··}'·)"..if·[·-n·" | ||
| 0003b660:· | 0003b660:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003b670:· | 0003b670:·7272·6563·745f·6861·7368·2220·5d3b·2074··rrect_hash"·];·t | ||
| 0003b680:· | 0003b680:·6865·6e0a·2020·2020·2320·4672·6f6d·2066··hen.····#·From·f | ||
| 0003b690:· | 0003b690:·696c·6573·206e·616d·6573·2067·6574·2070··iles·names·get·p | ||
| 0003b6a0:· | 0003b6a0:·6163·6b61·6765·206e·616d·6573·2061·6e64··ackage·names·and | ||
| 0003b6b0:·20 | 0003b6b0:·2063·6861·6e67·6520·6e65·776c·696e·6520···change·newline· | ||
| 0003b6c0:· | 0003b6c0:·746f·2073·7061·6365·2c20·6265·6361·7573··to·space,·becaus | ||
| 0003b6d0:· | 0003b6d0:·6520·7270·6d20·7772·6974·6573·2065·6163··e·rpm·writes·eac | ||
| 0003b6e0:·6 | 0003b6e0:·6820·7061·636b·6167·6520·746f·206e·6577··h·package·to·new | ||
| 0003b6f0:·2 | 0003b6f0:·206c·696e·650a·2020·2020·7061·636b·6167···line.····packag | ||
| 0003b700:· | 0003b700:·6573·5f74·6f5f·7265·696e·7374·616c·6c3d··es_to_reinstall= | ||
| 0003b710:· | 0003b710:·2224·2872·706d·202d·7166·2024·6669·6c65··"$(rpm·-qf·$file | ||
| 0003b720:· | 0003b720:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b730:· | 0003b730:·5f68·6173·6820·7c20·7472·2027·5c6e·2720··_hash·|·tr·'\n'· | ||
| 0003b740:· | 0003b740:·2720·2729·220a·0a20·2020·200a·2020·2020··'·')"..····.···· | ||
| 0003b750:· | 0003b750:·7975·6d20·7265·696e·7374·616c·6c20·2d79··yum·reinstall·-y | ||
| 0003b760:·2 | 0003b760:·2024·7061·636b·6167·6573·5f74·6f5f·7265···$packages_to_re | ||
| 0003b770:·6 | 0003b770:·696e·7374·616c·6c0a·2020·2020·0a66·690a··install.····.fi. | ||
| 0003b780:· | 0003b780:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | ||
| 0003b790:· | 0003b790:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | ||
| 0003b7a0:·6 | 0003b7a0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | ||
| 0003b7b0:· | 0003b7b0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | ||
| 0003b7c0:· | 0003b7c0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | ||
| 0003b7d0:· | 0003b7d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b7e0:· | 0003b7e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b7f0:·62 | 0003b7f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003b800:·6 | 0003b800:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0003b810:· | 0003b810:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b820:· | 0003b820:·2223·6964·6d35·3336·3022·2074·6162·696e··"#idm5360"·tabin | ||
| 0003b830:· | 0003b830:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b840:· | 0003b840:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b850:·6 | 0003b850:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b860:· | 0003b860:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b870:·657 | 0003b870:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b880:· | 0003b880:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b890:· | 0003b890:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003b8a0:· | 0003b8a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003b8b0:· | 0003b8b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003b8c0:· | 0003b8c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b8d0:·22 | 0003b8d0:·2269·646d·3533·3630·223e·3c74·6162·6c65··"idm5360"><table | ||
| 0003b8e0:·20 | 0003b8e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003b8f0:· | 0003b8f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003b900:· | 0003b900:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003b910:· | 0003b910:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003b920:·3 | 0003b920:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003b930:·2 | 0003b930:·2f74·683e·3c74·643e·6869·6768·3c2f·7464··/th><td>high</td | ||
| 0003b940:· | 0003b940:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b950:· | 0003b950:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b960:· | 0003b960:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0003b970:· | 0003b970:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b980:· | 0003b980:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b990:· | 0003b990:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b9a0:· | 0003b9a0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003b9b0:· | 0003b9b0:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 0003b9c0:· | 0003b9c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0003b9d0:· | 0003b9d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 0003b9e0:· | 0003b9e0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | ||
| 0003b9f0:· | 0003b9f0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | ||
| 0003ba00:·7 | 0003ba00:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | ||
| 0003ba10:·6 | 0003ba10:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | ||
| 0003ba20:·6 | 0003ba20:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | ||
| 0003ba30:· | 0003ba30:·302e·342e·310a·2020·2d20·4e49·5354·2d38··0.4.1.··-·NIST-8 | ||
| 0003ba40:· | 0003ba40:·3030·2d31·3731·2d33·2e33·2e38·0a20·202d··00-171-3.3.8.··- | ||
| 0003ba50:· | 0003ba50:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003ba60:· | 0003ba60:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003ba70:· | 0003ba70:·2d35·332d·4155·2d39·2833·290a·2020·2d20··-53-AU-9(3).··-· | ||
| 0003ba80:· | 0003ba80:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003ba90:· | 0003ba90:·2863·290a·2020·2d20·4e49·5354·2d38·3030··(c).··-·NIST-800 | ||
| 0003baa0:· | 0003baa0:·2d35·332d·434d·2d36·2864·290a·2020·2d20··-53-CM-6(d).··-· | ||
| 0003bab0:· | 0003bab0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bac0:· | 0003bac0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bad0:· | 0003bad0:·2d53·492d·3728·3129·0a20·202d·204e·4953··-SI-7(1).··-·NIS | ||
| 0003bae0:· | 0003bae0:·542d·3830·302d·3533·2d53·492d·3728·3629··T-800-53-SI-7(6) | ||
| 0003baf0:· | 0003baf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0003bb00:· | 0003bb00:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | ||
| 0003bb10:· | 0003bb10:·5376·342d·3131·2e35·2e32·0a20·202d·2068··Sv4-11.5.2.··-·h | ||
| 0003bb20:· | 0003bb20:·6967·685f·636f·6d70·6c65·7869·7479·0a20··igh_complexity.· | ||
| 0003bb30:· | 0003bb30:·202d·2068·6967·685f·7365·7665·7269·7479···-·high_severity | ||
| 0003bb40:· | 0003bb40:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | ||
| 0003bb50:·7 | 0003bb50:·7570·7469·6f6e·0a20·202d·206e·6f5f·7265··uption.··-·no_re | ||
| 0003bb60:·6 | 0003bb60:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 0003bb70:· | 0003bb70:·7265·7374·7269·6374·5f73·7472·6174·6567··restrict_strateg | ||
| 0003bb80:· | 0003bb80:·790a·2020·2d20·7270·6d5f·7665·7269·6679··y.··-·rpm_verify | ||
| 0003bb90:· | 0003bb90:·5f68·6173·6865·730a·0a2d·206e·616d·653a··_hashes..-·name: | ||
| 0003bba0:· | 0003bba0:·2027·5365·7420·6661·6374·3a20·5061·636b···'Set·fact:·Pack | ||
| Max diff block lines reached; 17774302/17829254 bytes (99.69%) of diff not shown. | |||
| Offset 15091, 408 lines modified | Offset 15091, 408 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3335·3922·2074·6162·696e··"#idm5359"·tabin | 0003af30:·2223·6964·6d35·3335·3922·2074·6162·696e··"#idm5359"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003afa0:·6 | 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003afb0:·3 | 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003afc0:· | 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003afd0:· | 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003afe0:· | 0003afe0:·6d35·3335·3922·3e3c·7072·653e·3c63·6f64··m5359"><pre><cod | ||
| 0003aff0:· | 0003aff0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b000:·6 | 0003b000:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b010:·6 | 0003b010:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b020:· | 0003b020:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b030:· | 0003b030:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b040:· | 0003b040:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b050:· | 0003b050:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b060:·7 | 0003b060:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b070:· | 0003b070:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b080:· | 0003b080:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b090:· | 0003b090:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b0a0:· | 0003b0a0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b0b0:· | 0003b0b0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b0c0:· | 0003b0c0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b0d0:· | 0003b0d0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b0e0:·6 | 0003b0e0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b0f0:· | 0003b0f0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b100:· | 0003b100:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b110:·6 | 0003b110:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b120:· | 0003b120:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b130:·6 | 0003b130:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b140:· | 0003b140:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b150:· | 0003b150:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b160:· | 0003b160:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b170:· | 0003b170:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b180:·2 | 0003b180:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b190:· | 0003b190:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b1a0:· | 0003b1a0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b1b0:·2 | 0003b1b0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b1c0:· | 0003b1c0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b1d0:· | 0003b1d0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b1e0:· | 0003b1e0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b1f0:· | 0003b1f0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b200:· | 0003b200:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b210:·2 | 0003b210:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b220:· | 0003b220:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b230:·6 | 0003b230:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b240:· | 0003b240:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b250:· | 0003b250:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b260:· | 0003b260:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b270:·6 | 0003b270:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b280:·7 | 0003b280:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b290:· | 0003b290:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b2a0:· | 0003b2a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b2b0:· | 0003b2b0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b2c0:·6 | 0003b2c0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b2d0:· | 0003b2d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b2e0:· | 0003b2e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b2f0:·6 | 0003b2f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b300:· | 0003b300:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b310:·6 | 0003b310:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b320:· | 0003b320:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b330:· | 0003b330:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b340:· | 0003b340:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b350:· | 0003b350:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b360:·7 | 0003b360:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b370:· | 0003b370:·3d22·2369·646d·3533·3630·2220·7461·6269··="#idm5360"·tabi | ||
| 0003b380:· | 0003b380:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b390:· | 0003b390:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b3a0:· | 0003b3a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b3b0:· | 0003b3b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b3c0:· | 0003b3c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b3d0:· | 0003b3d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b3e0:· | 0003b3e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b3f0:· | 0003b3f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b400:· | 0003b400:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b410:· | 0003b410:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b420:· | 0003b420:·3d22·6964·6d35·3336·3022·3e3c·7461·626c··="idm5360"><tabl | ||
| 0003b430:· | 0003b430:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b440:· | 0003b440:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b450:· | 0003b450:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b460:· | 0003b460:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b470:·3 | 0003b470:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b480:· | 0003b480:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b490:· | 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b4a0:· | 0003b4a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b4b0:· | 0003b4b0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b4c0:· | 0003b4c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b4d0:· | 0003b4d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b4e0:·3 | 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b4f0:· | 0003b4f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b500:· | 0003b500:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b510:· | 0003b510:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b520:· | 0003b520:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b530:·20 | 0003b530:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b540:·6 | 0003b540:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b550:·65 | 0003b550:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b560:· | 0003b560:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b570:·6 | 0003b570:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b580:· | 0003b580:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b590:· | 0003b590:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b5a0:· | 0003b5a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b5b0:· | 0003b5b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b5c0:· | 0003b5c0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b5d0:·20 | 0003b5d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b5e0:· | 0003b5e0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b5f0:· | 0003b5f0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b600:· | 0003b600:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b610:· | 0003b610:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b620:· | 0003b620:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b630:· | 0003b630:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b640:· | 0003b640:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b650:· | 0003b650:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b660:· | 0003b660:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b670:· | 0003b670:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b680:· | 0003b680:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b690:· | 0003b690:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b6a0:· | 0003b6a0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b6b0:·6 | 0003b6b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b6c0:· | 0003b6c0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b6d0:· | 0003b6d0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b6e0:·7 | 0003b6e0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b6f0:· | 0003b6f0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 10628886/10683838 bytes (99.49%) of diff not shown. | |||
| Offset 93, 14 lines modified | Offset 93, 33 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 102 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 110 | else | ||
| 111 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 112 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 106 | ··package_facts: | 119 | ··package_facts: |
| Offset 267, 33 lines modified | Offset 286, 14 lines modified | ||
| 267 | ··-·PCI-DSSv4-11.5.2 | 286 | ··-·PCI-DSSv4-11.5.2 |
| 268 | ··-·high_complexity | 287 | ··-·high_complexity |
| 269 | ··-·high_severity | 288 | ··-·high_severity |
| 270 | ··-·medium_disruption | 289 | ··-·medium_disruption |
| 271 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 273 | ··-·rpm_verify_hashes | 292 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 276 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 278 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 279 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 280 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 281 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 282 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 283 | fi | ||
| 284 | else | ||
| 285 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 314, 14 lines modified | Offset 314, 50 lines modified | ||
| 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 328 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 329 | declare·-A·SETPERMS_RPM_DICT | ||
| 330 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 331 | #·is·expected·by·the·RPM·database | ||
| 332 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 333 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 334 | do | ||
| 335 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 336 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 337 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 338 | ········do | ||
| 339 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 340 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 341 | ········done | ||
| 342 | done | ||
| 343 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 344 | #·correct·values | ||
| 345 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 346 | do | ||
| 347 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 348 | done | ||
| 349 | else | ||
| 350 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 351 | fi | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Gather·the·package·facts | 357 | -·name:·Gather·the·package·facts |
| 327 | ··package_facts: | 358 | ··package_facts: |
| Offset 433, 50 lines modified | Offset 469, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·high_complexity | 470 | ··-·high_complexity |
| 435 | ··-·high_severity | 471 | ··-·high_severity |
| 436 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 437 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 438 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 439 | ··-·rpm_verify_permissions | 475 | ··-·rpm_verify_permissions |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 850517/858599 bytes (99.06%) of diff not shown. | |||
| Offset 15083, 221 lines modified | Offset 15083, 221 lines modified | ||
| 0003aea0:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | 0003aea0:·6765·743d·2223·6964·6d35·3639·3622·2074··get="#idm5696"·t | ||
| 0003aeb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003aeb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aec0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aec0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003aed0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003aed0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aee0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aee0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aef0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aef0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003af00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003af00:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003af10:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003af20:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003af30:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af40:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af | 0003af10:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003af20:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003af30:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003af40:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003af50:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003af60:·646d·3536·3936·223e·3c70·7265·3e3c·636f··dm5696"><pre><co | |||
| 0003af70:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003af80:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003af90:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003afa0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003af | 0003afb0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003af70:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003af80:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003af90:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003afa0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003afb0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003afc0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af | 0003afc0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003afd0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003afe0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003aff0:·6964·6d35·3639·3722·2074·6162·696e·6465··idm5697"·tabinde | |||
| 0003b000:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b010:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b020:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b030:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b040:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b050:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b060:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b070:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b080:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b090:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0a0:·6d35·3639·3722·3e3c·7461·626c·6520·636c··m5697"><table·cl | |||
| 0003b0b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b0c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b0d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b0e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b0f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003 | 0003b100:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b110:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003aff0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b000:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b010:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b020:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b030:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b040:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b050:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b060:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b070:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b080:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b090:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b0a0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b0b0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b0c0:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003b0d0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b0e0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b0f0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b100:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b110:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b120:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b130:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b140:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b150:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b160:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b170:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b180:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b190:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b1a0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b1b0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b1c0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b1d0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b1e0:·2020·7768·656e·3a20·2822·6b65·726e·656c····when:·("kernel | |||
| 0003b1f0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b200:·7473·2e70·6163·6b61·6765·7320·6f72·2022··ts.packages·or·" | |||
| 0003b210:·6b65·726e·656c·2d75·656b·2220·696e·2061··kernel-uek"·in·a | |||
| 0003b220:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b230:·6b61·6765·7329·0a20·2074·6167·733a·0a20··kages).··tags:.· | |||
| 0003b240:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b250:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003b260:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003b270:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b280:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b290:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b2a0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b2b0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b2c0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b2d0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b2e0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b2f0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b300:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b310:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b320:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b330:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b340:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b350:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b360:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b370:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b380:·2369·646d·3536·3937·2220·7461·6269·6e64··#idm5697"·tabind | |||
| 0003b390:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b3a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b3b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b3c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b3d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b3e0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b3f0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b400:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b410:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b420:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b430:·6170·7365·2220·6964·3d22·6964·6d35·3639··apse"·id="idm569 | |||
| 0003b440:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b450:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b460:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b470:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b480:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b490:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| Max diff block lines reached; 29208682/29237828 bytes (99.90%) of diff not shown. | |||
| Offset 15101, 221 lines modified | Offset 15101, 221 lines modified | ||
| 0003afc0:·7461·7267·6574·3d22·2369·646d·3536·3936··target="#idm5696 | 0003afc0:·7461·7267·6574·3d22·2369·646d·3536·3936··target="#idm5696 | ||
| 0003afd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003afd0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afe0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afe0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003aff0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003aff0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b000:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b000:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b010:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b010:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b020:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b020:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b030:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b040:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b050:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b060:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0 | 0003b030:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b040:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b050:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b060:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b070:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b080:·3d22·6964·6d35·3639·3622·3e3c·7072·653e··="idm5696"><pre> | |||
| 0003b090:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b0a0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b0b0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b0c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b0 | 0003b0d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b090:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b0a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b0b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b0c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b0d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b0e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0 | 0003b0e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b0f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b100:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b110:·3d22·2369·646d·3536·3937·2220·7461·6269··="#idm5697"·tabi | |||
| 0003b120:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b130:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b140:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b150:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b160:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b170:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b180:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b190:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b1a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1c0:·2269·646d·3536·3937·223e·3c74·6162·6c65··"idm5697"><table | |||
| 0003b1d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b1e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b1f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b200:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b210:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003b220:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b230:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b240:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b120:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b130:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b140:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b150:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b160:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b170:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b180:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b190:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b1a0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b1b0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b1c0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b1d0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b1e0:·5354·4947·2d4f·4c30·382d·3030·2d30·3130··STIG-OL08-00-010 | |||
| 0003b1f0:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003b200:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b210:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b220:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b230:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b240:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b250:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b260:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b270:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b280:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b290:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b2a0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b2b0:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003b2c0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b2d0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b2e0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b2f0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b300:·6e74·0a20·2077·6865·6e3a·2028·226b·6572··nt.··when:·("ker | |||
| 0003b310:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003b320:·6661·6374·732e·7061·636b·6167·6573·206f··facts.packages·o | |||
| 0003b330:·7220·226b·6572·6e65·6c2d·7565·6b22·2069··r·"kernel-uek"·i | |||
| 0003b340:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b350:·7061·636b·6167·6573·290a·2020·7461·6773··packages).··tags | |||
| 0003b360:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b370:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b380:·472d·4f4c·3038·2d30·302d·3031·3033·3539··G-OL08-00-010359 | |||
| 0003b390:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b3a0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b3b0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b3c0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b3d0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b3e0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b3f0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b400:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b410:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b420:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b430:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b440:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b450:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b460:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b470:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b480:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b490:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b4a0:·743d·2223·6964·6d35·3639·3722·2074·6162··t="#idm5697"·tab | |||
| 0003b4b0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b4c0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b4d0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b4e0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b4f0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b500:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003b510:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b520:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b530:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b540:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b550:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b560:·3536·3937·223e·3c70·7265·3e3c·636f·6465··5697"><pre><code | |||
| 0003b570:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b580:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b590:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b5a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b5b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b5c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b5d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| Max diff block lines reached; 29083741/29112887 bytes (99.90%) of diff not shown. | |||
| Offset 15037, 218 lines modified | Offset 15037, 218 lines modified | ||
| 0003abc0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abc0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abd0:·646d·3632·3739·2220·7461·6269·6e64·6578··dm6279"·tabindex | 0003abd0:·646d·3632·3739·2220·7461·6269·6e64·6578··dm6279"·tabindex | ||
| 0003abe0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abe0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003abf0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003abf0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac00:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac10:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac20:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac30:·6d65·6469·6174·696f·6e20·4 | 0003ac30:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003ac40:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003ac50:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ac60:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ac70:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ac80:·6d36·3237·3922·3e3c·7461·626c·6520·636c··m6279"><table·cl | |||
| 0003ac90:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003aca0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003acb0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003acc0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003acd0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003ace0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003ac | 0003ac40:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003ac50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ac60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ac70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac80:·7365·2220·6964·3d22·6964·6d36·3237·3922··se"·id="idm6279" | |||
| 0003ac90:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003aca0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003acb0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003acc0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003acd0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ace0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003acf0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ad00:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ad10:·7461·7267·6574·3d22·2369·646d·3632·3830··target="#idm6280 | |||
| 0003ad20:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad30:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ad40:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ad50:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ad60:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ad70:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ad80:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ad90:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ada0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003adb0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003adc0:·6522·2069·643d·2269·646d·3632·3830·223e··e"·id="idm6280"> | |||
| 0003add0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ade0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003adf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ae00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ae10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a | 0003ae20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003a | 0003ae30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ad20:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ad30:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003a | 0003ae40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003ae50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ae60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003a | 0003ae70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003ae80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ae90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aea0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003aeb0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003aec0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003aed0:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003aee0:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003aef0:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003af00:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003af10:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003af20:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003ad60:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ad70:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ad80:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003ad90:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003ada0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003adb0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003adc0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003add0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003ade0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003adf0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003ae00:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003ae10:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003ae20:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003ae30:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003ae40:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ae50:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003ae60:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003ae70:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003ae80:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003ae90:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003aea0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003aeb0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003aec0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003aed0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003aee0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003aef0:·656e·3a20·2822·6b65·726e·656c·2220·696e··en:·("kernel"·in | |||
| 0003af00:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003af10:·6163·6b61·6765·7320·6f72·2022·6b65·726e··ackages·or·"kern | |||
| 0003af20:·656c·2d75·656b·2220·696e·2061·6e73·6962··el-uek"·in·ansib | |||
| 0003af30:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003af40:·7329·0a20·2074·6167·733a·0a20·202d·2043··s).··tags:.··-·C | |||
| 0003af50:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003af60:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003af70:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003af80:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003af90:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003afa0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003afb0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003afc0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003afd0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003afe0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003aff0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b000:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b010:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003 | 0003af30:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003 | 0003af40:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003 | 0003af50:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003 | 0003af60:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003 | 0003af70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003 | 0003af80:·6d36·3238·3122·2074·6162·696e·6465·783d··m6281"·tabindex= | ||
| 0003 | 0003af90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003 | 0003afa0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003 | 0003afb0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003 | 0003afc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003 | 0003afd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b0d0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | |||
| 0003b0e0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b0f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b100:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| Max diff block lines reached; 21564648/21593380 bytes (99.87%) of diff not shown. | |||
| Offset 15042, 218 lines modified | Offset 15042, 218 lines modified | ||
| 0003ac10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ac10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ac20:·2223·6964·6d36·3237·3922·2074·6162·696e··"#idm6279"·tabin | 0003ac20:·2223·6964·6d36·3237·3922·2074·6162·696e··"#idm6279"·tabin | ||
| 0003ac30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ac30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ac40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ac40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ac50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ac50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ac60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ac60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ac70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ac70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003ac80:·3e52·656d·6564·6961·7469·6f6e·204 | 0003ac80:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003ac90:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aca0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003acb0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003acc0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003acd0:·2269·646d·3632·3739·223e·3c74·6162·6c65··"idm6279"><table | |||
| 0003ace0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003acf0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ad00:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ad10:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ad20:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ad30:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ad40:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a | 0003ac90:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003aca0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003acb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003acc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003acd0:·6c61·7073·6522·2069·643d·2269·646d·3632··lapse"·id="idm62 | |||
| 0003ace0:·3739·223e·3c70·7265·3e3c·636f·6465·3e0a··79"><pre><code>. | |||
| 0003acf0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ad00:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ad10:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ad20:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ad30:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ad40:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ad50:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ad60:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003ad70:·3238·3022·2074·6162·696e·6465·783d·2230··280"·tabindex="0 | |||
| 0003ad80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ad90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ada0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003adb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003adc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003add0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003ade0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003adf0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ae00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ae10:·6170·7365·2220·6964·3d22·6964·6d36·3238··apse"·id="idm628 | |||
| 0003ae20:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003ae30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae70:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a | 0003ae80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003ad70:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a | 0003ae90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003aea0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a | 0003aeb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003aec0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003aed0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003aee0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003aef0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003af00:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003af10:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003af20:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003af30:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003ada0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003adb0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003adc0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003add0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003ade0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003adf0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003ae00:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ae10:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003ae20:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003ae30:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ae40:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003ae50:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003ae60:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003ae70:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003ae80:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003ae90:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003aea0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003aeb0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003aec0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003aed0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003aee0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003aef0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003af00:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003af | 0003af40:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | ||
| 0003af50:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003af60:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003af70:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003af20:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003af30:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003af40:·2077·6865·6e3a·2028·226b·6572·6e65·6c22···when:·("kernel" | |||
| 0003af50:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003af60:·732e·7061·636b·6167·6573·206f·7220·226b··s.packages·or·"k | |||
| 0003af70:·6572·6e65·6c2d·7565·6b22·2069·6e20·616e··ernel-uek"·in·an | |||
| 0003af80:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003af90:·6167·6573·290a·2020·7461·6773·3a0a·2020··ages).··tags:.·· | |||
| 0003afa0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003afb0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003afc0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afd0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003afe0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003aff0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b000:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b010:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b020:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b030:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b040:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b050:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b060:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003 | 0003af80:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003 | 0003af90:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003 | 0003afa0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003 | 0003afb0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003 | 0003afc0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003 | 0003afd0:·2369·646d·3632·3831·2220·7461·6269·6e64··#idm6281"·tabind | ||
| 0003 | 0003afe0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003 | 0003aff0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b0 | 0003b000:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b | 0003b010:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b | 0003b020:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b | 0003b030:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b130:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b140:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b150:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| Max diff block lines reached; 21869444/21898176 bytes (99.87%) of diff not shown. | |||
| Offset 15033, 218 lines modified | Offset 15033, 218 lines modified | ||
| 0003ab80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003ab80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003ab90:·3237·3922·2074·6162·696e·6465·783d·2230··279"·tabindex="0 | 0003ab90:·3237·3922·2074·6162·696e·6465·783d·2230··279"·tabindex="0 | ||
| 0003aba0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aba0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003abb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003abb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003abc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003abc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003abd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003abd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003abe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003abe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003abf0:·6961·7469·6f6e·204 | 0003abf0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003ac00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ac10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ac20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ac30:·6c61·7073·6522·2069·643d·2269·646d·3632··lapse"·id="idm62 | |||
| 0003ac40:·3739·223e·3c74·6162·6c65·2063·6c61·7373··79"><table·class | |||
| 0003ac50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ac60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ac70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ac80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ac90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003aca0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ac | 0003ac00:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003ac10:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ac20:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ac30:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ac40:·2069·643d·2269·646d·3632·3739·223e·3c70···id="idm6279"><p | |||
| 0003ac50:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003ac60:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003ac70:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003ac80:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ac90:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aca0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003acb0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003acc0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003acd0:·6765·743d·2223·6964·6d36·3238·3022·2074··get="#idm6280"·t | |||
| 0003ace0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003acf0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003ad00:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003ad10:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003ad20:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003ad30:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003ad40:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003ad50:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ad60:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ad70:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ad80:·6964·3d22·6964·6d36·3238·3022·3e3c·7461··id="idm6280"><ta | |||
| 0003ad90:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ada0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003adb0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003adc0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003add0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a | 0003ade0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003a | 0003adf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003ace0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003acf0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a | 0003ae00:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003ae10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ae20:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a | 0003ae30:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003ae40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ae50:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003ae60:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003ae70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003ae80:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003ae90:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003aea0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003aeb0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003aec0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003aed0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003aee0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003ad20:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003ad30:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003ad40:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003ad50:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003ad60:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003ad70:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003ad80:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003ad90:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003ada0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003adb0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003adc0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003add0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003ade0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003adf0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003ae00:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003ae10:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003ae20:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003ae30:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ae40:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003ae50:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003ae60:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003ae70:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003ae80:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003ae90:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003aea0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003aeb0:·2028·226b·6572·6e65·6c22·2069·6e20·616e···("kernel"·in·an | |||
| 0003aec0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003aed0:·6167·6573·206f·7220·226b·6572·6e65·6c2d··ages·or·"kernel- | |||
| 0003aee0:·7565·6b22·2069·6e20·616e·7369·626c·655f··uek"·in·ansible_ | |||
| 0003aef0:·6661·6374·732e·7061·636b·6167·6573·290a··facts.packages). | |||
| 0003af00:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003af10:·2d35·2e31·302e·312e·330a·2020·2d20·4e49··-5.10.1.3.··-·NI | |||
| 0003af20:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003af30:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003af40:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003af50:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003af60:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003af70:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003af80:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003af90:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003afa0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003afb0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003afc0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003afd0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003a | 0003aef0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003af | 0003af00:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003 | 0003af10:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003 | 0003af20:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3632··a-target="#idm62 | ||
| 0003 | 0003af40:·3831·2220·7461·6269·6e64·6578·3d22·3022··81"·tabindex="0" | ||
| 0003 | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003 | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003 | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003 | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003 | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003afb0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b090:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b0a0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| Max diff block lines reached; 9776037/9804769 bytes (99.71%) of diff not shown. | |||
| Offset 112, 14 lines modified | Offset 112, 53 lines modified | ||
| 112 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 112 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 113 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 114 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"aide" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | include·install_aide | ||
| 129 | class·install_aide·{ | ||
| 130 | ··package·{·'aide': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 141 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 142 | ····yum·install·-y·"aide" | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·--add=aide | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 124 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 125 | ··package_facts: | 159 | ··package_facts: |
| Offset 148, 53 lines modified | Offset 187, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 187 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 188 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 189 | ··-·low_complexity |
| 151 | ··-·low_disruption | 190 | ··-·low_disruption |
| 152 | ··-·medium_severity | 191 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 192 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 193 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 165 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 167 | ····yum·install·-y·"aide" | ||
| 168 | fi | ||
| 169 | else | ||
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 171 | fi | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_aide | ||
| 178 | class·install_aide·{ | ||
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·--add=aide | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 193 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 194 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 195 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 218, 14 lines modified | Offset 218, 28 lines modified | ||
| 218 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 218 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 219 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 220 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 221 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 222 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 226 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 227 | if·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·then | ||
| 228 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 229 | ····yum·install·-y·"aide" | ||
| 230 | fi | ||
| 231 | /usr/sbin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | ||
| 233 | else | ||
| Max diff block lines reached; 1057588/1062641 bytes (99.52%) of diff not shown. | |||
| Offset 14725, 227 lines modified | Offset 14725, 227 lines modified | ||
| 00039840:·6172·6765·743d·2223·6964·6d39·3536·3922··arget="#idm9569" | 00039840:·6172·6765·743d·2223·6964·6d39·3536·3922··arget="#idm9569" | ||
| 00039850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 00039850:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00039860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 00039860:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00039870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 00039870:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00039880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 00039880:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00039890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 00039890:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 000398a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 000398a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 000398b0:·6f6e·204 | 000398b0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 000398c0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 000398d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000398e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000398f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00039900:·2269·646d·3935·3639·223e·3c70·7265·3e3c··"idm9569"><pre>< | |||
| 00039910:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 00039920:·5d5d·0a6e·616d·6520·3d20·2264·6e66·2d61··]].name·=·"dnf-a | |||
| 00039930:·7574·6f6d·6174·6963·220a·7665·7273·696f··utomatic".versio | |||
| 00039940:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00039950:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039960:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039970:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039980:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039990:·612d·7461·7267·6574·3d22·2369·646d·3935··a-target="#idm95 | |||
| 000399a0:·3730·2220·7461·6269·6e64·6578·3d22·3022··70"·tabindex="0" | |||
| 000399b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000399c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000399d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000399e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000399f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039a00:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 00039a10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039a20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039a30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039a40:·7073·6522·2069·643d·2269·646d·3935·3730··pse"·id="idm9570 | |||
| 00039a50:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039a60:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039a70:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039a80:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039a90:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039aa0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039ab0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039ac0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039ad0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039ae0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039af0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039b00:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039b10:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039b20:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039b30:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039b40:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 00039b50:·6520·696e·7374·616c·6c5f·646e·662d·6175··e·install_dnf-au | |||
| 00039b60:·746f·6d61·7469·630a·0a63·6c61·7373·2069··tomatic..class·i | |||
| 00039b70:·6e73·7461·6c6c·5f64·6e66·2d61·7574·6f6d··nstall_dnf-autom | |||
| 00039b80:·6174·6963·207b·0a20·2070·6163·6b61·6765··atic·{.··package | |||
| 00039b90:·207b·2027·646e·662d·6175·746f·6d61·7469···{·'dnf-automati | |||
| 00039ba0:·6327·3a0a·2020·2020·656e·7375·7265·203d··c':.····ensure·= | |||
| 00039bb0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 00039bc0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 00039bd0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039be0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039bf0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039c00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039c10:·612d·7461·7267·6574·3d22·2369·646d·3935··a-target="#idm95 | |||
| 00039c20:·3731·2220·7461·6269·6e64·6578·3d22·3022··71"·tabindex="0" | |||
| 00039c30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039c40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039c50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039c60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00039c70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039c80:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00039 | 00039c90:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 00039 | 00039ca0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00039 | 00039cb0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00039 | 00039cc0:·6522·2069·643d·2269·646d·3935·3731·223e··e"·id="idm9571"> | ||
| 00039 | 00039cd0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 00039 | 00039ce0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 00039 | 00039cf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00039 | 00039d00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 00039 | 00039d10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 00039 | 00039d20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00039 | 00039d30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00039 | 00039d40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00039 | 00039d50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00039 | 00039d60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 00039 | 00039d70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 00039 | 00039d80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 00039 | 00039d90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 00039 | 00039da0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | ||
| 00039 | 00039db0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 00039 | 00039dc0:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 00039dd0:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | |||
| 00039de0:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | |||
| 00039df0:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | |||
| 00039e00:·2021·2028·207b·2072·706d·202d·2d71·7569···!·(·{·rpm·--qui | |||
| 00039e10:·6574·202d·7120·6b65·726e·656c·203b·7d20··et·-q·kernel·;}· | |||
| 00039e20:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | |||
| 00039e30:·202d·2d71·7569·6574·202d·7120·7270·6d2d···--quiet·-q·rpm- | |||
| 00039e40:·6f73·7472·6565·203b·7d20·2661·6d70·3b26··ostree·;}·&& | |||
| 00039e50:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | |||
| 00039e60:·6574·202d·7120·626f·6f74·6320·3b7d·2026··et·-q·bootc·;}·& | |||
| 00039e70:·616d·703b·2661·6d70·3b20·7b20·2120·7270··amp;&·{·!·rp | |||
| 00039e80:·6d20·2d2d·7175·6965·7420·2d71·206f·7065··m·--quiet·-q·ope | |||
| 00039a00:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 00039a10:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 00039a20:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 00039a30:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 00039a40:·6773·3a0a·2020·2d20·656e·6162·6c65·5f73··gs:.··-·enable_s | |||
| 00039a50:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00039a60:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00039a70:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00039a80:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00039a90:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 00039aa0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 00039ab0:·6765·5f64·6e66·2d61·7574·6f6d·6174·6963··ge_dnf-automatic | |||
| 00039ac0:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 00039ad0:·6d65·3a20·456e·7375·7265·2064·6e66·2d61··me:·Ensure·dnf-a | |||
| 00039ae0:·7574·6f6d·6174·6963·2069·7320·696e·7374··utomatic·is·inst | |||
| 00039af0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 00039b00:·0a20·2020·206e·616d·653a·2064·6e66·2d61··.····name:·dnf-a | |||
| 00039b10:·7574·6f6d·6174·6963·0a20·2020·2073·7461··utomatic.····sta | |||
| 00039b20:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00039b30:·656e·3a20·6e6f·7420·2820·226b·6572·6e65··en:·not·(·"kerne | |||
| 00039b40:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 00039b50:·6374·732e·7061·636b·6167·6573·2061·6e64··cts.packages·and | |||
| 00039b60:·2022·7270·6d2d·6f73·7472·6565·2220·696e···"rpm-ostree"·in | |||
| 00039b70:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 00039b80:·6163·6b61·6765·730a·2020·2020·616e·6420··ackages.····and· | |||
| 00039b90:·2262·6f6f·7463·2220·696e·2061·6e73·6962··"bootc"·in·ansib | |||
| Max diff block lines reached; 3603693/3633667 bytes (99.18%) of diff not shown. | |||
| Offset 81, 50 lines modified | Offset 81, 31 lines modified | ||
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 85 | ············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 86 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 87 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 89 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 90 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 91 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 92 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 93 | -·name:·Gather·the·package·facts | ||
| 94 | ··package_facts: | ||
| 95 | ····manager:·auto | ||
| 96 | ··tags: | ||
| 97 | ··-·enable_strategy | ||
| 98 | ··-·low_complexity | ||
| 99 | ··-·low_disruption | ||
| 100 | ··-·medium_severity | ||
| 101 | ··-·no_reboot_needed | ||
| 102 | ··-·package_dnf-automatic_installed | ||
| 103 | -·name:·Ensure·dnf-automatic·is·installed | ||
| 104 | ··package: | ||
| 105 | ····name:·dnf-automatic | ||
| 106 | ····state:·present | ||
| 107 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 108 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 109 | ansible_facts.packages | ||
| 110 | ····) | ||
| 111 | ··tags: | ||
| 112 | ··-·enable_strategy | ||
| 113 | ··-·low_complexity | ||
| 114 | ··-·low_disruption | ||
| 115 | ··-·medium_severity | ||
| 116 | ··-·no_reboot_needed | ||
| 117 | ··-·package_dnf-automatic_installed | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 88 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | [[packages]] | 89 | [[packages]] |
| 120 | name·=·"dnf-automatic" | 90 | name·=·"dnf-automatic" |
| 121 | version·=·"*" | 91 | version·=·"*" |
| 92 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 93 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 94 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 95 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 96 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 97 | include·install_dnf-automatic | ||
| 98 | class·install_dnf-automatic·{ | ||
| 99 | ··package·{·'dnf-automatic': | ||
| 100 | ····ensure·=>·'installed', | ||
| 101 | ··} | ||
| 102 | } | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | #·Remediation·is·applicable·only·in·certain·platforms | 108 | #·Remediation·is·applicable·only·in·certain·platforms |
| 128 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | 109 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- |
| Offset 133, 33 lines modified | Offset 114, 52 lines modified | ||
| 133 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 114 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 134 | ····yum·install·-y·"dnf-automatic" | 115 | ····yum·install·-y·"dnf-automatic" |
| 135 | fi | 116 | fi |
| 136 | else | 117 | else |
| 137 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 138 | fi | 119 | fi |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.a_.c_.o_.n_.d_.a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | include·install_dnf-automatic | ||
| 145 | class·install_dnf-automatic·{ | ||
| 146 | 125 | package·--add=dnf-automatic | |
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | } | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8 | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Gather·the·package·facts | ||
| 132 | ··package_facts: | ||
| 133 | ····manager:·auto | ||
| 134 | ··tags: | ||
| 135 | ··-·enable_strategy | ||
| 136 | ··-·low_complexity | ||
| 137 | ··-·low_disruption | ||
| 138 | ··-·medium_severity | ||
| 139 | ··-·no_reboot_needed | ||
| 140 | ··-·package_dnf-automatic_installed | ||
| 155 | 141 | -·name:·Ensure·dnf-automatic·is·installed | |
| 142 | ··package: | ||
| 143 | ····name:·dnf-automatic | ||
| 144 | ····state:·present | ||
| 145 | ··when:·not·(·"kernel"·in·ansible_facts.packages·and·"rpm-ostree"·in·ansible_facts.packages | ||
| 146 | ····and·"bootc"·in·ansible_facts.packages·and·not·"openshift-kubelet"·in | ||
| 147 | ansible_facts.packages | ||
| 148 | ····) | ||
| 149 | ··tags: | ||
| 150 | ··-·enable_strategy | ||
| 151 | ··-·low_complexity | ||
| 152 | ··-·low_disruption | ||
| 153 | ··-·medium_severity | ||
| 154 | ··-·no_reboot_needed | ||
| 155 | ··-·package_dnf-automatic_installed | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 159 | automatic.conf. | 159 | automatic.conf. |
| 160 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 160 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 161 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 161 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 162 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 162 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 304, 14 lines modified | Offset 304, 42 lines modified | ||
| 304 | ···························(a),·CM-11(b) | 304 | ···························(a),·CM-11(b) |
| 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 305 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 306 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 306 | ············_\x8o_\x8s_\x8p_\x8p···········FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 307 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 | 308 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000366-GPOS-00153 |
| 309 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 | 309 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R59 |
| Max diff block lines reached; 232114/237180 bytes (97.86%) of diff not shown. | |||
| Offset 15109, 176 lines modified | Offset 15109, 176 lines modified | ||
| 0003b040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b040:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b050:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | 0003b050:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | ||
| 0003b060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b060:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b070:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b080:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b090:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0b0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0b0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b0c0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b0d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b100:·6d37·3034·3622·3e3c·7072·653e·3c63·6f64··m7046"><pre><cod | |||
| 0003b110:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b120:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b130:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b140:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b150:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b0c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b100:·2269·646d·3730·3436·223e·3c74·6162·6c65··"idm7046"><table | |||
| 0003b110:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b120:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b130:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b140:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b150:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b160:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b170:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b180:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b190:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b1e0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b1f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b200:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b | 0003b170:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003b | 0003b180:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b190:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b1a0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b1b0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b1c0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b1d0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b1e0:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b1f0:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b200:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b210:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b220:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b230:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b240:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b250:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b260:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b270:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b280:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b290:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b2a0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b2b0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b2c0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b2d0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b2e0:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b2f0:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b300:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b310:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b320:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b330:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b340:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b350:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b360:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b370:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b380:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b390:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b3a0:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b3b0:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b3c0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b3d0:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b3e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b3f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b400:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b410:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b420:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b430:·743d·2223·6964·6d37·3034·3822·2074·6162··t="#idm7048"·tab | |||
| 0003b440:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b450:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b460:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b470:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b480:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b490:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b4a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b4b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4e0:·643d·2269·646d·3730·3438·223e·3c74·6162··d="idm7048"><tab | |||
| 0003b4f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b500:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b510:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b520:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b530:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b540:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b550:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b560:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b570:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b580:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b590:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b5a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5c0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5e0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003b5f0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003b600:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003b | 0003b610:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003b | 0003b620:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003b | 0003b630:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003b260:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003b270:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003b280:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b290:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b2a0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b2b0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b2c0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b2d0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b2e0:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003b2f0:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| Max diff block lines reached; 11822601/11845537 bytes (99.81%) of diff not shown. | |||
| Offset 128, 14 lines modified | Offset 128, 33 lines modified | ||
| 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 131 | ·····················FCS_TLSC_EXT.1 | 131 | ·····················FCS_TLSC_EXT.1 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | var_system_crypto_policy='DEFAULT' | ||
| 137 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 138 | rc=$? | ||
| 139 | if·test·"$rc"·=·127;·then | ||
| 140 | » echo·"$stderr_of_call"·>&2 | ||
| 141 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 142 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 143 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | elif·test·"$rc"·!=·0;·then | ||
| 146 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 147 | » false··#·end·with·an·error·code | ||
| 148 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 154 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 141 | ··set_fact: | 155 | ··set_fact: |
| Offset 180, 33 lines modified | Offset 199, 14 lines modified | ||
| 180 | ··-·PCI-DSSv4-2.2.7 | 199 | ··-·PCI-DSSv4-2.2.7 |
| 181 | ··-·configure_crypto_policy | 200 | ··-·configure_crypto_policy |
| 182 | ··-·high_severity | 201 | ··-·high_severity |
| 183 | ··-·low_complexity | 202 | ··-·low_complexity |
| 184 | ··-·low_disruption | 203 | ··-·low_disruption |
| 185 | ··-·no_reboot_needed | 204 | ··-·no_reboot_needed |
| 186 | ··-·restrict_strategy | 205 | ··-·restrict_strategy |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | var_system_crypto_policy='DEFAULT' | ||
| 189 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 190 | rc=$? | ||
| 191 | if·test·"$rc"·=·127;·then | ||
| 192 | » echo·"$stderr_of_call"·>&2 | ||
| 193 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 194 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 195 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | elif·test·"$rc"·!=·0;·then | ||
| 198 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | fi | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 207 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 203 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 208 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 204 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 209 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 205 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 210 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 206 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 211 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 207 | ············and·makes·system·configuration·more·fragmented. | 212 | ············and·makes·system·configuration·more·fragmented. |
| Offset 217, 14 lines modified | Offset 217, 19 lines modified | ||
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 225 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 226 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 232 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 230 | ··lineinfile: | 233 | ··lineinfile: |
| Offset 242, 19 lines modified | Offset 247, 14 lines modified | ||
| 242 | ··-·PCI-DSSv4-2.2.7 | 247 | ··-·PCI-DSSv4-2.2.7 |
| 243 | ··-·configure_ssh_crypto_policy | 248 | ··-·configure_ssh_crypto_policy |
| 244 | ··-·disable_strategy | 249 | ··-·disable_strategy |
| 245 | ··-·low_complexity | 250 | ··-·low_complexity |
| 246 | ··-·medium_disruption | 251 | ··-·medium_disruption |
| 247 | ··-·medium_severity | 252 | ··-·medium_severity |
| 248 | ··-·reboot_required | 253 | ··-·reboot_required |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 251 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 252 | Group ·Disk·Partitioning· Group·contains·1·rule | 254 | Group ·Disk·Partitioning· Group·contains·1·rule |
| 253 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be | 255 | _\x8[_\x8r_\x8e_\x8f_\x8] ·To·ensure·separation·and·protection·of·data,·there·are·top-level·system·directories·which·should·be |
| 254 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme | 256 | placed·on·their·own·physical·partition·or·logical·volume.·The·installer's·default·partitioning·scheme |
| 255 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. | 257 | creates·separate·logical·volumes·for·/,·/boot,·and·swap. |
| 256 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" | 258 | ····*·If·starting·with·any·of·the·default·layouts,·check·the·box·to·\"Review·and·modify·partitioning.\" |
| 257 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already | 259 | ······This·allows·for·the·easy·creation·of·additional·logical·volumes·inside·the·volume·group·already |
| 258 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using | 260 | ······created,·though·it·may·require·making·/'s·logical·volume·smaller·to·create·space.·In·general,·using |
| Offset 339, 14 lines modified | Offset 339, 75 lines modified | ||
| 339 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. | 339 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. |
| 340 | Severity: ··medium | 340 | Severity: ··medium |
| 341 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list | 341 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list |
| 342 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 342 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 343 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 | 343 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 |
| 344 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 344 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 345 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 | 345 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·rpm·--quiet·-q·gdm·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 349 | #·Check·for·setting·in·any·of·the·DConf·db·directories | ||
| 350 | #·If·files·contain·ibus·or·distro,·ignore·them. | ||
| 351 | #·The·assignment·assumes·that·individual·filenames·don't·contain·: | ||
| 352 | readarray·-t·SETTINGSFILES·<·<(grep·-r·"\\[org/gnome/login-screen\\]"·"/etc/dconf/db/"·\ | ||
| 353 | ································|·grep·-v·'distro\|ibus\|local.d'·|·cut·-d":"·-f1) | ||
| 354 | DCONFFILE="/etc/dconf/db/local.d/00-security-settings" | ||
| 355 | DBDIR="/etc/dconf/db/local.d" | ||
| Max diff block lines reached; 1072280/1080063 bytes (99.28%) of diff not shown. | |||
| Offset 15069, 176 lines modified | Offset 15069, 176 lines modified | ||
| 0003adc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003adc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003add0:·3d22·2369·646d·3730·3436·2220·7461·6269··="#idm7046"·tabi | 0003add0:·3d22·2369·646d·3730·3436·2220·7461·6269··="#idm7046"·tabi | ||
| 0003ade0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ade0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003adf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003adf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae30:·223e·5265·6d65·6469·6174·696f·6e20· | 0003ae30:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003ae40:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0003ae50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae80:·646d·3730·3436·223e·3c70·7265·3e3c·636f··dm7046"><pre><co | |||
| 0003ae90:·6465·3e0a·7661·725f·7379·7374·656d·5f63··de>.var_system_c | |||
| 0003aea0:·7279·7074·6f5f·706f·6c69·6379·3d27·3c61··rypto_policy='<a | |||
| 0003aeb0:·6262·7220·7469·746c·653d·2266·726f·6d20··bbr·title="from· | |||
| 0003aec0:·5072·6f66·696c·652f·7265·6669·6e65·2d76··Profile/refine-v | |||
| 0003aed0:·616c·7565·3a20·7863·6364·665f·6f72·672e··alue:·xccdf_org. | |||
| 0003aee0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | |||
| 0003ae40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ae50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ae60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ae70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ae80:·3d22·6964·6d37·3034·3622·3e3c·7461·626c··="idm7046"><tabl | |||
| 0003ae90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aea0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aeb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aec0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003aed0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aee0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aef0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003af60:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 0003af70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003af80:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | |||
| 0003a | 0003aef0:·6e74·5f76·616c·7565·5f76·6172·5f73·7973··nt_value_var_sys | ||
| 0003af | 0003af00:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003af10:·7922·3e44·4546·4155·4c54·3c2f·6162·6272··y">DEFAULT</abbr | |||
| 0003af20:·3e27·0a0a·0a73·7464·6572·725f·6f66·5f63··>'...stderr_of_c | |||
| 0003af30:·616c·6c3d·2428·7570·6461·7465·2d63·7279··all=$(update-cry | |||
| 0003af40:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003af50:·6574·2024·7b76·6172·5f73·7973·7465·6d5f··et·${var_system_ | |||
| 0003af60:·6372·7970·746f·5f70·6f6c·6963·797d·2032··crypto_policy}·2 | |||
| 0003af70:·2667·743b·2661·6d70·3b31·2026·6774·3b20··>&1·>· | |||
| 0003af80:·2f64·6576·2f6e·756c·6c29·0a72·633d·243f··/dev/null).rc=$? | |||
| 0003af90:·0a0a·6966·2074·6573·7420·2224·7263·2220··..if·test·"$rc"· | |||
| 0003afa0:·3d20·3132·373b·2074·6865·6e0a·0965·6368··=·127;·then..ech | |||
| 0003afb0:·6f20·2224·7374·6465·7272·5f6f·665f·6361··o·"$stderr_of_ca | |||
| 0003afc0:·6c6c·2220·2667·743b·2661·6d70·3b32·0a09··ll"·>&2.. | |||
| 0003afd0:·6563·686f·2022·4d61·6b65·2073·7572·6520··echo·"Make·sure· | |||
| 0003afe0:·7468·6174·2074·6865·2073·6372·6970·7420··that·the·script· | |||
| 0003aff0:·6973·2069·6e73·7461·6c6c·6564·206f·6e20··is·installed·on· | |||
| 0003b000:·7468·6520·7265·6d65·6469·6174·6564·2073··the·remediated·s | |||
| 0003b010:·7973·7465·6d2e·2220·2667·743b·2661·6d70··ystem."·>& | |||
| 0003b020:·3b32·0a09·6563·686f·2022·5365·6520·6f75··;2..echo·"See·ou | |||
| 0003b030:·7470·7574·206f·6620·7468·6520·2764·6e66··tput·of·the·'dnf | |||
| 0003b040:·2070·726f·7669·6465·7320·7570·6461·7465···provides·update | |||
| 0003b050:·2d63·7279·7074·6f2d·706f·6c69·6369·6573··-crypto-policies | |||
| 0003b060:·2720·636f·6d6d·616e·6422·2026·6774·3b26··'·command"·>& | |||
| 0003b070:·616d·703b·320a·0965·6368·6f20·2274·6f20··amp;2..echo·"to· | |||
| 0003b080:·7365·6520·7768·6174·2070·6163·6b61·6765··see·what·package | |||
| 0003b090:·2074·6f20·2872·6529·696e·7374·616c·6c22···to·(re)install" | |||
| 0003b0a0:·2026·6774·3b26·616d·703b·320a·0a09·6661···>&2...fa | |||
| 0003b0b0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b0c0:·616e·2065·7272·6f72·2063·6f64·650a·656c··an·error·code.el | |||
| 0003b0d0:·6966·2074·6573·7420·2224·7263·2220·213d··if·test·"$rc"·!= | |||
| 0003b0e0:·2030·3b20·7468·656e·0a09·6563·686f·2022···0;·then..echo·" | |||
| 0003b0f0:·4572·726f·7220·696e·766f·6b69·6e67·2074··Error·invoking·t | |||
| 0003b100:·6865·2075·7064·6174·652d·6372·7970·746f··he·update-crypto | |||
| 0003b110:·2d70·6f6c·6963·6965·7320·7363·7269·7074··-policies·script | |||
| 0003b120:·3a20·2473·7464·6572·725f·6f66·5f63·616c··:·$stderr_of_cal | |||
| 0003b130:·6c22·2026·6774·3b26·616d·703b·320a·0966··l"·>&2..f | |||
| 0003b140:·616c·7365·2020·2320·656e·6420·7769·7468··alse··#·end·with | |||
| 0003b150:·2061·6e20·6572·726f·7220·636f·6465·0a66···an·error·code.f | |||
| 0003b160:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | |||
| 0003b170:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b180:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b190:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1a0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1b0:·6574·3d22·2369·646d·3730·3438·2220·7461··et="#idm7048"·ta | |||
| 0003b1c0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b1d0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b1e0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b1f0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b200:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b210:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b220:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b230:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b240:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b250:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b260:·6964·3d22·6964·6d37·3034·3822·3e3c·7461··id="idm7048"><ta | |||
| 0003b270:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b280:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b290:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b2a0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b2b0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b2f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b300:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b310:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b320:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b330:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b340:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | |||
| 0003b350:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b360:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | |||
| 0003b370:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | |||
| 0003b380:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 0003 | 0003b390:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 0003a | 0003b3a0:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| 0003 | 0003b3b0:·6661·6374·3a0a·2020·2020·7661·725f·7379··fact:.····var_sy | ||
| 0003afe0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003aff0:·3a20·2121·7374·7220·3c61·6262·7220·7469··:·!!str·<abbr·ti | |||
| 0003b000:·746c·653d·2266·726f·6d20·5072·6f66·696c··tle="from·Profil | |||
| 0003b010:·652f·7265·6669·6e65·2d76·616c·7565·3a20··e/refine-value:· | |||
| 0003b020:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | |||
| 0003b030:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | |||
| 0003b040:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | |||
| 0003b050:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | |||
| 0003b060:·4155·4c54·3c2f·6162·6272·3e0a·2020·7461··AULT</abbr>.··ta | |||
| 0003b070:·6773·3a0a·2020·2020·2d20·616c·7761·7973··gs:.····-·always | |||
| Max diff block lines reached; 7787030/7809966 bytes (99.71%) of diff not shown. | |||
| Offset 125, 14 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 125 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 126 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 126 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 127 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 127 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 128 | ·····················FCS_TLSC_EXT.1 | 128 | ·····················FCS_TLSC_EXT.1 |
| 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 130 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 130 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | var_system_crypto_policy='DEFAULT' | ||
| 134 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 135 | rc=$? | ||
| 136 | if·test·"$rc"·=·127;·then | ||
| 137 | » echo·"$stderr_of_call"·>&2 | ||
| 138 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 139 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 140 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 141 | » false··#·end·with·an·error·code | ||
| 142 | elif·test·"$rc"·!=·0;·then | ||
| 143 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 137 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 151 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 138 | ··set_fact: | 152 | ··set_fact: |
| Offset 177, 33 lines modified | Offset 196, 14 lines modified | ||
| 177 | ··-·PCI-DSSv4-2.2.7 | 196 | ··-·PCI-DSSv4-2.2.7 |
| 178 | ··-·configure_crypto_policy | 197 | ··-·configure_crypto_policy |
| 179 | ··-·high_severity | 198 | ··-·high_severity |
| 180 | ··-·low_complexity | 199 | ··-·low_complexity |
| 181 | ··-·low_disruption | 200 | ··-·low_disruption |
| 182 | ··-·no_reboot_needed | 201 | ··-·no_reboot_needed |
| 183 | ··-·restrict_strategy | 202 | ··-·restrict_strategy |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | var_system_crypto_policy='DEFAULT' | ||
| 186 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 187 | rc=$? | ||
| 188 | if·test·"$rc"·=·127;·then | ||
| 189 | » echo·"$stderr_of_call"·>&2 | ||
| 190 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 191 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 192 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 193 | » false··#·end·with·an·error·code | ||
| 194 | elif·test·"$rc"·!=·0;·then | ||
| 195 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | fi | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 204 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 200 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that | 205 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that |
| 201 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either | 206 | Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either |
| 202 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 207 | commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 203 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate | 208 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate |
| 204 | ············expectations,·and·makes·system·configuration·more·fragmented. | 209 | ············expectations,·and·makes·system·configuration·more·fragmented. |
| Offset 214, 14 lines modified | Offset 214, 19 lines modified | ||
| 214 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 214 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 215 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 215 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 216 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 216 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 217 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 218 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 218 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 219 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 219 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 222 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 223 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 221 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 222 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 223 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 224 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 225 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 226 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 227 | ··lineinfile: | 230 | ··lineinfile: |
| Offset 239, 19 lines modified | Offset 244, 14 lines modified | ||
| 239 | ··-·PCI-DSSv4-2.2.7 | 244 | ··-·PCI-DSSv4-2.2.7 |
| 240 | ··-·configure_ssh_crypto_policy | 245 | ··-·configure_ssh_crypto_policy |
| 241 | ··-·disable_strategy | 246 | ··-·disable_strategy |
| 242 | ··-·low_complexity | 247 | ··-·low_complexity |
| 243 | ··-·medium_disruption | 248 | ··-·medium_disruption |
| 244 | ··-·medium_severity | 249 | ··-·medium_severity |
| 245 | ··-·reboot_required | 250 | ··-·reboot_required |
| 246 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 247 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 248 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 249 | Group ·GNOME·Desktop·Environment· Group·contains·1·rule | 251 | Group ·GNOME·Desktop·Environment· Group·contains·1·rule |
| 250 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow | 252 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow |
| 251 | users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME | 253 | users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME |
| 252 | Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as | 254 | Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as |
| 253 | display·server·management. | 255 | display·server·management. |
| 254 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical | 256 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical |
| Offset 274, 14 lines modified | Offset 274, 23 lines modified | ||
| 274 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date | 274 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_db_up_to_date |
| 275 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 275 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 276 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) | 276 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(5)(ii)(A) |
| 277 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 | 277 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-6.2 |
| 278 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 278 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 279 | ············_\x8c_\x8c_\x8n·····reload_dconf_db | 279 | ············_\x8c_\x8c_\x8n·····reload_dconf_db |
| 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 | 280 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·8.2.8,·8.2 |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 283 | if·rpm·--quiet·-q·gdm·&&·{·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek;·};·then | ||
| 284 | dconf·update | ||
| 285 | else | ||
| 286 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 287 | fi | ||
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 288 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 289 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 290 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| Max diff block lines reached; 804644/810374 bytes (99.29%) of diff not shown. | |||
| Offset 15110, 176 lines modified | Offset 15110, 176 lines modified | ||
| 0003b050:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b050:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b060:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | 0003b060:·2223·6964·6d37·3034·3622·2074·6162·696e··"#idm7046"·tabin | ||
| 0003b070:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b070:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b080:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b080:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b090:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b090:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b0a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b0a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0c0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b0c0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b0d0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b0e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b100:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b110:·6d37·3034·3622·3e3c·7072·653e·3c63·6f64··m7046"><pre><cod | |||
| 0003b120:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b130:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b140:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b150:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b160:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b170:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b0d0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b100:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b110:·2269·646d·3730·3436·223e·3c74·6162·6c65··"idm7046"><table | |||
| 0003b120:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b130:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b140:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b150:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b160:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b170:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b180:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b190:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b1a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b1b0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b1c0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b1d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1e0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b1f0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b200:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b210:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b | 0003b180:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003b | 0003b190:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b1a0:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b1b0:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b1c0:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b1d0:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b1e0:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b1f0:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b200:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b210:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b220:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b230:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b240:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b250:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b260:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b270:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b280:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b290:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b2a0:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b2b0:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b2c0:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b2d0:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b2e0:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b2f0:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b300:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b310:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b320:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b330:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b340:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b350:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b360:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b370:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b380:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b390:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b3a0:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b3b0:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b3c0:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b3d0:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b3e0:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b3f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b400:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b410:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b420:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b430:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b440:·743d·2223·6964·6d37·3034·3822·2074·6162··t="#idm7048"·tab | |||
| 0003b450:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b460:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b470:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b480:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b490:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b4a0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b4b0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b4c0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b4d0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b4e0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b4f0:·643d·2269·646d·3730·3438·223e·3c74·6162··d="idm7048"><tab | |||
| 0003b500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b530:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b540:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b550:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b560:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b570:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b580:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b590:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b5a0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b5b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b5c0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b5d0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 0003b5e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | |||
| 0003b600:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | |||
| 0003b610:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | |||
| 0003b | 0003b620:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003b | 0003b630:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003b | 0003b640:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003b270:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | |||
| 0003b280:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | |||
| 0003b290:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | |||
| 0003b2a0:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | |||
| 0003b2b0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | |||
| 0003b2c0:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | |||
| 0003b2d0:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | |||
| 0003b2e0:·7074·6f5f·706f·6c69·6379·223e·4445·4641··pto_policy">DEFA | |||
| 0003b2f0:·554c·543c·2f61·6262·723e·0a20·2074·6167··ULT</abbr>.··tag | |||
| 0003b300:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | |||
| Max diff block lines reached; 8978881/9001817 bytes (99.75%) of diff not shown. | |||
| Offset 128, 14 lines modified | Offset 128, 33 lines modified | ||
| 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 128 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 129 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 130 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 131 | ·····················FCS_TLSC_EXT.1 | 131 | ·····················FCS_TLSC_EXT.1 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 | 133 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL4 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | var_system_crypto_policy='DEFAULT' | ||
| 137 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 138 | rc=$? | ||
| 139 | if·test·"$rc"·=·127;·then | ||
| 140 | » echo·"$stderr_of_call"·>&2 | ||
| 141 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 142 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 143 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 144 | » false··#·end·with·an·error·code | ||
| 145 | elif·test·"$rc"·!=·0;·then | ||
| 146 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 147 | » false··#·end·with·an·error·code | ||
| 148 | fi | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 140 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 154 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 141 | ··set_fact: | 155 | ··set_fact: |
| Offset 180, 33 lines modified | Offset 199, 14 lines modified | ||
| 180 | ··-·PCI-DSSv4-2.2.7 | 199 | ··-·PCI-DSSv4-2.2.7 |
| 181 | ··-·configure_crypto_policy | 200 | ··-·configure_crypto_policy |
| 182 | ··-·high_severity | 201 | ··-·high_severity |
| 183 | ··-·low_complexity | 202 | ··-·low_complexity |
| 184 | ··-·low_disruption | 203 | ··-·low_disruption |
| 185 | ··-·no_reboot_needed | 204 | ··-·no_reboot_needed |
| 186 | ··-·restrict_strategy | 205 | ··-·restrict_strategy |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | var_system_crypto_policy='DEFAULT' | ||
| 189 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 190 | rc=$? | ||
| 191 | if·test·"$rc"·=·127;·then | ||
| 192 | » echo·"$stderr_of_call"·>&2 | ||
| 193 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 194 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 195 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 196 | » false··#·end·with·an·error·code | ||
| 197 | elif·test·"$rc"·!=·0;·then | ||
| 198 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 199 | » false··#·end·with·an·error·code | ||
| 200 | fi | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is | 207 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is |
| 203 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto | 208 | supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto |
| 204 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or | 209 | Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or |
| 205 | not·set·at·all·in·the·/etc/sysconfig/sshd. | 210 | not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 206 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, | 211 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations, |
| 207 | ············and·makes·system·configuration·more·fragmented. | 212 | ············and·makes·system·configuration·more·fragmented. |
| Offset 217, 14 lines modified | Offset 217, 19 lines modified | ||
| 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 217 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 | 218 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13 |
| 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 | 219 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_SSH_EXT.1,·FCS_SSHS_EXT.1,·FCS_SSHC_EXT.1 |
| 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 220 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 221 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 | 222 | ············_\x8c_\x8c_\x8n······A.5.SEC-OL6 |
| 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 225 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 226 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 229 | -·name:·Configure·SSH·to·use·System·Crypto·Policy | 232 | -·name:·Configure·SSH·to·use·System·Crypto·Policy |
| 230 | ··lineinfile: | 233 | ··lineinfile: |
| Offset 242, 19 lines modified | Offset 247, 14 lines modified | ||
| 242 | ··-·PCI-DSSv4-2.2.7 | 247 | ··-·PCI-DSSv4-2.2.7 |
| 243 | ··-·configure_ssh_crypto_policy | 248 | ··-·configure_ssh_crypto_policy |
| 244 | ··-·disable_strategy | 249 | ··-·disable_strategy |
| 245 | ··-·low_complexity | 250 | ··-·low_complexity |
| 246 | ··-·medium_disruption | 251 | ··-·medium_disruption |
| 247 | ··-·medium_severity | 252 | ··-·medium_severity |
| 248 | ··-·reboot_required | 253 | ··-·reboot_required |
| 249 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 250 | SSH_CONF="/etc/sysconfig/sshd" | ||
| 251 | sed·-i·"/^\s*CRYPTO_POLICY.*$/Id"·$SSH_CONF | ||
| 252 | Group ·GNOME·Desktop·Environment· Group·contains·3·groups·and·7·rules | 254 | Group ·GNOME·Desktop·Environment· Group·contains·3·groups·and·7·rules |
| 253 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to | 255 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to |
| 254 | easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display | 256 | easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display |
| 255 | Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 257 | Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 256 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical·environment. | 258 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Oracle·Linux·Graphical·environment. |
| Offset 282, 14 lines modified | Offset 282, 75 lines modified | ||
| 282 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. | 282 | ············the·system·to·quickly·enumerate·known·user·accounts·without·logging·in. |
| 283 | Severity: ··medium | 283 | Severity: ··medium |
| 284 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list | 284 | Rule·ID:····xccdf_org.ssgproject.content_rule_dconf_gnome_disable_user_list |
| 285 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 285 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 286 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 | 286 | References:·_\x8n_\x8i_\x8s_\x8t···CM-6(a),·AC-23 |
| 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 | 287 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00227 |
| 288 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 | 288 | ············_\x8c_\x8c_\x8n····A.11.SEC-OL9 |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·rpm·--quiet·-q·gdm·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | ||
| 292 | #·Check·for·setting·in·any·of·the·DConf·db·directories | ||
| 293 | #·If·files·contain·ibus·or·distro,·ignore·them. | ||
| 294 | #·The·assignment·assumes·that·individual·filenames·don't·contain·: | ||
| 295 | readarray·-t·SETTINGSFILES·<·<(grep·-r·"\\[org/gnome/login-screen\\]"·"/etc/dconf/db/"·\ | ||
| 296 | ································|·grep·-v·'distro\|ibus\|local.d'·|·cut·-d":"·-f1) | ||
| 297 | DCONFFILE="/etc/dconf/db/local.d/00-security-settings" | ||
| 298 | DBDIR="/etc/dconf/db/local.d" | ||
| Max diff block lines reached; 941433/949083 bytes (99.19%) of diff not shown. | |||
| Offset 15040, 259 lines modified | Offset 15040, 259 lines modified | ||
| 0003abf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003abf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac00:·3637·3731·2220·7461·6269·6e64·6578·3d22··6771"·tabindex=" | 0003ac00:·3637·3731·2220·7461·6269·6e64·6578·3d22··6771"·tabindex=" | ||
| 0003ac10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003ac10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ac20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003ac20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ac30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ac30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ac40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ac40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ac50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ac50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ac60:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003ac70:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ac80:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ac90:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003aca0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003acb0:·3737·3122·3e3c·7461·626c·6520·636c·6173··771"><table·clas | |||
| 0003acc0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003acd0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ace0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003acf0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a | 0003ac60:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003ac70:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003ac80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ac90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003aca0:·7073·6522·2069·643d·2269·646d·3637·3731··pse"·id="idm6771 | |||
| 0003acb0:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | |||
| 0003acc0:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003acd0:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003ace0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003acf0:·6d73·0a69·6620·2820·2120·2820·5b20·2224··ms.if·(·!·(·[·"$ | |||
| 0003ad00:·7b63·6f6e·7461·696e·6572·3a2d·7d22·203d··{container:-}"·= | |||
| 0003ad10:·3d20·2262·7772·6170·2d6f·7362·7569·6c64··=·"bwrap-osbuild | |||
| 0003ad20:·2220·5d20·2920·2661·6d70·3b26·616d·703b··"·]·)·&& | |||
| 0003ad30:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | |||
| 0003ad40:·6b65·726e·656c·207c·7c20·7270·6d20·2d2d··kernel·||·rpm·-- | |||
| 0003ad50:·7175·6965·7420·2d71·206b·6572·6e65·6c2d··quiet·-q·kernel- | |||
| 0003ad60:·7565·6b20·2920·2661·6d70·3b26·616d·703b··uek·)·&& | |||
| 0003ad70:·207b·2021·2028·207b·2072·706d·202d·2d71···{·!·(·{·rpm·--q | |||
| 0003ad80:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | |||
| 0003ad90:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | |||
| 0003ada0:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | |||
| 0003adb0:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | |||
| 0003adc0:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | |||
| 0003add0:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | |||
| 0003ade0:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | |||
| 0003adf0:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | |||
| 0003ae00:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | |||
| 0003ae10:·203b·7d20·293b·207d·3b20·7468·656e·0a0a···;}·);·};·then.. | |||
| 0003ae20:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | |||
| 0003ae30:·2d2d·656e·6162·6c65·0a46·4950·535f·434f··--enable.FIPS_CO | |||
| 0003ae40:·4e46·3d22·2f65·7463·2f64·7261·6375·742e··NF="/etc/dracut. | |||
| 0003ae50:·636f·6e66·2e64·2f34·302d·6669·7073·2e63··conf.d/40-fips.c | |||
| 0003ae60:·6f6e·6622·0a69·6620·2120·6772·6570·2022··onf".if·!·grep·" | |||
| 0003ae70:·5e61·6464·5f64·7261·6375·746d·6f64·756c··^add_dracutmodul | |||
| 0003ae80:·6573·2b3d·5c22·2066·6970·7320·5c22·2220··es+=\"·fips·\""· | |||
| 0003ae90:·2446·4950·535f·434f·4e46·3b20·7468·656e··$FIPS_CONF;·then | |||
| 0003aea0:·0a20·2020·2065·6368·6f20·2261·6464·5f64··.····echo·"add_d | |||
| 0003aeb0:·7261·6375·746d·6f64·756c·6573·2b3d·5c22··racutmodules+=\" | |||
| 0003aec0:·2066·6970·7320·5c22·2220·2667·743b·2667···fips·\""·>&g | |||
| 0003aed0:·743b·2024·4649·5053·5f43·4f4e·460a·6669··t;·$FIPS_CONF.fi | |||
| 0003aee0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | |||
| 0003aef0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | |||
| 0003af00:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | |||
| 0003af10:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | |||
| 0003af20:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | |||
| 0003af30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003af40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003af50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003af60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003af70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003af80:·3d22·2369·646d·3637·3732·2220·7461·6269··="#idm6772"·tabi | |||
| 0003af90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003afa0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003afb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003afc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003afd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003afe0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003aff0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b000:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b010:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b020:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b030:·3d22·6964·6d36·3737·3222·3e3c·7461·626c··="idm6772"><tabl | |||
| 0003b040:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b050:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b060:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b070:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b080:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b090:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0003b0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003 | 0003b0c0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003ad20:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003ad30:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0003ad40:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0003ad50:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ad60:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0003 | 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003 | 0003b0e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | ||
| 0003b0f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b100:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b110:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003b120:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b130:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b140:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b150:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b160:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b170:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b180:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 0003b190:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003ad90:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003ada0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003adb0:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003adc0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003add0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003ade0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003adf0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003ae00:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003ae10:·434d·2d36·2861·290a·2020·2d20·4e49·5354··CM-6(a).··-·NIST | |||
| 0003ae20:·2d38·3030·2d35·332d·4941·2d37·0a20·202d··-800-53-IA-7.··- | |||
| 0003ae30:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003ae40:·3132·0a20·202d·204e·4953·542d·3830·302d··12.··-·NIST-800- | |||
| 0003ae50:·3533·2d53·432d·3132·2832·290a·2020·2d20··53-SC-12(2).··-· | |||
| 0003ae60:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003ae70:·3228·3329·0a20·202d·204e·4953·542d·3830··2(3).··-·NIST-80 | |||
| 0003ae80:·302d·3533·2d53·432d·3133·0a20·202d·2065··0-53-SC-13.··-·e | |||
| 0003ae90:·6e61·626c·655f·6472·6163·7574·5f66·6970··nable_dracut_fip | |||
| 0003aea0:·735f·6d6f·6475·6c65·0a20·202d·2068·6967··s_module.··-·hig | |||
| 0003aeb0:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | |||
| 0003aec0:·6564·6975·6d5f·636f·6d70·6c65·7869·7479··edium_complexity | |||
| 0003aed0:·0a20·202d·206d·6564·6975·6d5f·6469·7372··.··-·medium_disr | |||
| Max diff block lines reached; 4987036/5021426 bytes (99.32%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 27 lines modified | ||
| 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 97 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 | 98 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 |
| 99 | ············_\x8i_\x8s_\x8m······1446 | 99 | ············_\x8i_\x8s_\x8m······1446 |
| 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 100 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 101 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 102 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 107 | fips-mode-setup·--enable | ||
| 108 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 109 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 110 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 111 | fi | ||
| 112 | else | ||
| 113 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 114 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Gather·the·package·facts | 120 | -·name:·Gather·the·package·facts |
| 110 | ··package_facts: | 121 | ··package_facts: |
| Offset 190, 27 lines modified | Offset 203, 14 lines modified | ||
| 190 | ··-·NIST-800-53-SC-13 | 203 | ··-·NIST-800-53-SC-13 |
| 191 | ··-·enable_dracut_fips_module | 204 | ··-·enable_dracut_fips_module |
| 192 | ··-·high_severity | 205 | ··-·high_severity |
| 193 | ··-·medium_complexity | 206 | ··-·medium_complexity |
| 194 | ··-·medium_disruption | 207 | ··-·medium_disruption |
| 195 | ··-·reboot_required | 208 | ··-·reboot_required |
| 196 | ··-·restrict_strategy | 209 | ··-·restrict_strategy |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 199 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 200 | fips-mode-setup·--enable | ||
| 201 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 202 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 203 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 204 | fi | ||
| 205 | else | ||
| 206 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 207 | fi | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | To·enable·FIPS·mode,·run·the·following·command: | 211 | To·enable·FIPS·mode,·run·the·following·command: |
| 210 | fips-mode-setup·--enable | 212 | fips-mode-setup·--enable |
| 211 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 213 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 212 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 214 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 213 | ····*·Creating·/etc/system-fips | 215 | ····*·Creating·/etc/system-fips |
| Offset 259, 63 lines modified | Offset 259, 63 lines modified | ||
| 259 | $·sudo·yum·install·crypto-policies | 259 | $·sudo·yum·install·crypto-policies |
| 260 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 260 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 261 | Severity: ··medium | 261 | Severity: ··medium |
| 262 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 262 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 263 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 263 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 264 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 264 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 265 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 265 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 267 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 268 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 269 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 270 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 271 | -·name:·Ensure·crypto-policies·is·installed | ||
| 272 | ··package: | ||
| 273 | ····name:·crypto-policies | ||
| 274 | ····state:·present | ||
| 275 | ··tags: | ||
| 276 | ··-·enable_strategy | ||
| 277 | ··-·low_complexity | ||
| 278 | ··-·low_disruption | ||
| 279 | ··-·medium_severity | ||
| 280 | ··-·no_reboot_needed | ||
| 281 | ··-·package_crypto-policies_installed | ||
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 283 | [[packages]] | 267 | [[packages]] |
| 284 | name·=·"crypto-policies" | 268 | name·=·"crypto-policies" |
| 285 | version·=·"*" | 269 | version·=·"*" |
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 291 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 292 | ····yum·install·-y·"crypto-policies" | ||
| 293 | fi | ||
| 294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 271 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 272 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 273 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 274 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 299 | include·install_crypto-policies | 275 | include·install_crypto-policies |
| 300 | class·install_crypto-policies·{ | 276 | class·install_crypto-policies·{ |
| 301 | ··package·{·'crypto-policies': | 277 | ··package·{·'crypto-policies': |
| 302 | ····ensure·=>·'installed', | 278 | ····ensure·=>·'installed', |
| 303 | ··} | 279 | ··} |
| 304 | } | 280 | } |
| 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 286 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 287 | ····yum·install·-y·"crypto-policies" | ||
| 288 | fi | ||
| 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 310 | package·--add=crypto-policies | 294 | package·--add=crypto-policies |
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 296 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 297 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 298 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 299 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 300 | -·name:·Ensure·crypto-policies·is·installed | ||
| Max diff block lines reached; 593179/599212 bytes (98.99%) of diff not shown. | |||
| Offset 15136, 408 lines modified | Offset 15136, 408 lines modified | ||
| 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b1f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b200:·6d35·3934·3422·2074·6162·696e·6465·783d··m5944"·tabindex= | 0003b200:·6d35·3934·3422·2074·6162·696e·6465·783d··m5944"·tabindex= | ||
| 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b210:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b220:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b230:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b240:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b250:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b260:·6564·6961·7469·6f6e·20 | 0003b260:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b270:· | 0003b270:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b280:·3 | 0003b280:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b290:· | 0003b290:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b2a0:·6 | 0003b2a0:·6170·7365·2220·6964·3d22·6964·6d35·3934··apse"·id="idm594 | ||
| 0003b2b0:·3 | 0003b2b0:·3422·3e3c·7072·653e·3c63·6f64·653e·2320··4"><pre><code>#· | ||
| 0003b2c0:· | 0003b2c0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b2d0:·7 | 0003b2d0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b2e0:· | 0003b2e0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b2f0:· | 0003b2f0:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b300:· | 0003b300:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b310:· | 0003b310:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b320:· | 0003b320:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b330:·7 | 0003b330:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b340:· | 0003b340:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b350:· | 0003b350:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b360:·6 | 0003b360:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b370:· | 0003b370:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b380:· | 0003b380:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b390:·65 | 0003b390:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b3a0:· | 0003b3a0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b3b0:·6 | 0003b3b0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b3c0:·6 | 0003b3c0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b3d0:· | 0003b3d0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b3e0:·6 | 0003b3e0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b3f0:·7 | 0003b3f0:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b400:·2 | 0003b400:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b410:· | 0003b410:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b420:· | 0003b420:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b430:· | 0003b430:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b440:·2 | 0003b440:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b450:· | 0003b450:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b460:· | 0003b460:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b470:·2 | 0003b470:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b480:· | 0003b480:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b490:· | 0003b490:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b4a0:· | 0003b4a0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b4b0:· | 0003b4b0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b4c0:· | 0003b4c0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b4d0:· | 0003b4d0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b4e0:·3 | 0003b4e0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003b4f0:· | 0003b4f0:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003b500:·6 | 0003b500:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003b510:·6 | 0003b510:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003b520:· | 0003b520:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003b530:· | 0003b530:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003b540:· | 0003b540:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b550:·7 | 0003b550:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003b560:·2 | 0003b560:·2922·0a0a·2020·2020·0a20·2020·2079·756d··)"..····.····yum | ||
| 0003b570:· | 0003b570:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | ||
| 0003b580:· | 0003b580:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003b590:· | 0003b590:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003b5a0:· | 0003b5a0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003b5b0:· | 0003b5b0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003b5c0:·6 | 0003b5c0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003b5d0:· | 0003b5d0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003b5e0:·6 | 0003b5e0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003b5f0:·6 | 0003b5f0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b600:· | 0003b600:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b610:· | 0003b610:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b620:·6 | 0003b620:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b630:·206 | 0003b630:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b640:· | 0003b640:·646d·3539·3435·2220·7461·6269·6e64·6578··dm5945"·tabindex | ||
| 0003b650:· | 0003b650:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b660:· | 0003b660:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b670:· | 0003b670:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b680:· | 0003b680:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b690:· | 0003b690:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b6a0:· | 0003b6a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003b6b0:· | 0003b6b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b6c0:· | 0003b6c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b6d0:· | 0003b6d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b6e0:· | 0003b6e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b6f0:·6 | 0003b6f0:·6d35·3934·3522·3e3c·7461·626c·6520·636c··m5945"><table·cl | ||
| 0003b700:·61 | 0003b700:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003b710:· | 0003b710:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003b720:· | 0003b720:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003b730:· | 0003b730:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003b740:· | 0003b740:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003b750:·3 | 0003b750:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003b760:· | 0003b760:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b770:· | 0003b770:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003b780:· | 0003b780:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003b790:· | 0003b790:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b7a0:· | 0003b7a0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b7b0:·3 | 0003b7b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b7c0:· | 0003b7c0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b7d0:· | 0003b7d0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b7e0:·7 | 0003b7e0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b7f0:· | 0003b7f0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003b800:·686 | 0003b800:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003b810:· | 0003b810:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003b820:· | 0003b820:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003b830:· | 0003b830:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003b840:· | 0003b840:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003b850:·2 | 0003b850:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003b860:· | 0003b860:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003b870:· | 0003b870:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003b880:· | 0003b880:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b890:· | 0003b890:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003b8a0:· | 0003b8a0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003b8b0:· | 0003b8b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003b8c0:· | 0003b8c0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003b8d0:·5 | 0003b8d0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003b8e0:· | 0003b8e0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003b8f0:· | 0003b8f0:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003b900:· | 0003b900:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003b910:· | 0003b910:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003b920:· | 0003b920:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003b930:·2 | 0003b930:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003b940:· | 0003b940:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003b950:·6 | 0003b950:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003b960:·2 | 0003b960:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003b970:·6 | 0003b970:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003b980:·7 | 0003b980:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003b990:· | 0003b990:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003b9a0:·20 | 0003b9a0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003b9b0:· | 0003b9b0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| 0003b9c0:· | 0003b9c0:·6574·2066·6163·743a·2050·6163·6b61·6765··et·fact:·Package | ||
| Max diff block lines reached; 6290611/6345563 bytes (99.13%) of diff not shown. | |||
| Offset 101, 14 lines modified | Offset 101, 33 lines modified | ||
| 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 101 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 110 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 111 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 112 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 113 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 114 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 115 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 116 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 117 | fi | ||
| 118 | else | ||
| 119 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 120 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Gather·the·package·facts | 126 | -·name:·Gather·the·package·facts |
| 114 | ··package_facts: | 127 | ··package_facts: |
| Offset 275, 33 lines modified | Offset 294, 14 lines modified | ||
| 275 | ··-·PCI-DSSv4-11.5.2 | 294 | ··-·PCI-DSSv4-11.5.2 |
| 276 | ··-·high_complexity | 295 | ··-·high_complexity |
| 277 | ··-·high_severity | 296 | ··-·high_severity |
| 278 | ··-·medium_disruption | 297 | ··-·medium_disruption |
| 279 | ··-·no_reboot_needed | 298 | ··-·no_reboot_needed |
| 280 | ··-·restrict_strategy | 299 | ··-·restrict_strategy |
| 281 | ··-·rpm_verify_hashes | 300 | ··-·rpm_verify_hashes |
| 282 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 283 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 284 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 285 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 286 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 287 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 288 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 289 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 290 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 291 | fi | ||
| 292 | else | ||
| 293 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 294 | fi | ||
| 295 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 301 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 296 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 302 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 297 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 303 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 298 | run·the·following·command·to·determine·which·package·owns·it: | 304 | run·the·following·command·to·determine·which·package·owns·it: |
| 299 | $·rpm·-qf·FILENAME | 305 | $·rpm·-qf·FILENAME |
| 300 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 306 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 301 | $·sudo·rpm·--restore·PACKAGENAME | 307 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 320, 14 lines modified | Offset 320, 46 lines modified | ||
| 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 320 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 321 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 322 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 323 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 325 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 326 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 332 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 333 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 334 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 335 | declare·-A·SETPERMS_RPM_DICT | ||
| 336 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 337 | #·is·expected·by·the·RPM·database | ||
| 338 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 339 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 340 | do | ||
| 341 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 342 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 343 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 344 | done | ||
| 345 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 346 | #·correct·values | ||
| 347 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 348 | do | ||
| 349 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 350 | done | ||
| 351 | else | ||
| 352 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 353 | fi | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 328 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 329 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 330 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 331 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 332 | -·name:·Gather·the·package·facts | 359 | -·name:·Gather·the·package·facts |
| 333 | ··package_facts: | 360 | ··package_facts: |
| Offset 435, 46 lines modified | Offset 467, 14 lines modified | ||
| 435 | ··-·PCI-DSSv4-11.5.2 | 467 | ··-·PCI-DSSv4-11.5.2 |
| 436 | ··-·high_complexity | 468 | ··-·high_complexity |
| 437 | ··-·high_severity | 469 | ··-·high_severity |
| 438 | ··-·medium_disruption | 470 | ··-·medium_disruption |
| 439 | ··-·no_reboot_needed | 471 | ··-·no_reboot_needed |
| 440 | ··-·restrict_strategy | 472 | ··-·restrict_strategy |
| 441 | ··-·rpm_verify_ownership | 473 | ··-·rpm_verify_ownership |
| 442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 443 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 444 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 445 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 446 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 664663/672374 bytes (98.85%) of diff not shown. | |||
| Offset 15162, 408 lines modified | Offset 15162, 408 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3539·3434·2220·7461·6269·6e64·6578·3d22··5944"·tabindex=" | 0003b3a0:·3539·3434·2220·7461·6269·6e64·6578·3d22··5944"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20· | 0003b400:·6469·6174·696f·6e20·5368·656c·6c20·7363··diation·Shell·sc | ||
| 0003b410:·7 | 0003b410:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0003b420:· | 0003b420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b430:·6 | 0003b430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b440:· | 0003b440:·7073·6522·2069·643d·2269·646d·3539·3434··pse"·id="idm5944 | ||
| 0003b450:· | 0003b450:·223e·3c70·7265·3e3c·636f·6465·3e23·2052··"><pre><code>#·R | ||
| 0003b460:· | 0003b460:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | ||
| 0003b470:·7 | 0003b470:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | ||
| 0003b480:· | 0003b480:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | ||
| 0003b490:·6 | 0003b490:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | ||
| 0003b4a0:· | 0003b4a0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | ||
| 0003b4b0:· | 0003b4b0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | ||
| 0003b4c0:· | 0003b4c0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | ||
| 0003b4d0:· | 0003b4d0:·2072·706d·2d6f·7374·7265·6520·3b7d·2026···rpm-ostree·;}·& | ||
| 0003b4e0:·6 | 0003b4e0:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003b4f0:· | 0003b4f0:·2d2d·7175·6965·7420·2d71·2062·6f6f·7463··--quiet·-q·bootc | ||
| 0003b500:· | 0003b500:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b510:·2 | 0003b510:·2021·2072·706d·202d·2d71·7569·6574·202d···!·rpm·--quiet·- | ||
| 0003b520:·7 | 0003b520:·7120·6f70·656e·7368·6966·742d·6b75·6265··q·openshift-kube | ||
| 0003b530:· | 0003b530:·6c65·7420·3b7d·2029·3b20·7468·656e·0a0a··let·;}·);·then.. | ||
| 0003b540:· | 0003b540:·2320·4669·6e64·2077·6869·6368·2066·696c··#·Find·which·fil | ||
| 0003b550:·6 | 0003b550:·6573·2068·6176·6520·696e·636f·7272·6563··es·have·incorrec | ||
| 0003b560:·7 | 0003b560:·7420·6861·7368·2028·6e6f·7420·696e·202f··t·hash·(not·in·/ | ||
| 0003b570:·6 | 0003b570:·6574·632c·2062·6563·6175·7365·206f·6620··etc,·because·of· | ||
| 0003b580:· | 0003b580:·7468·6520·7379·7374·656d·2072·656c·6174··the·system·relat | ||
| 0003b590:· | 0003b590:·6564·2063·6f6e·6669·6720·6669·6c65·7329··ed·config·files) | ||
| 0003b5a0:·20 | 0003b5a0:·2061·6e64·2074·6865·6e20·6765·7420·6669···and·then·get·fi | ||
| 0003b5b0:· | 0003b5b0:·6c65·7320·6e61·6d65·730a·6669·6c65·735f··les·names.files_ | ||
| 0003b5c0:· | 0003b5c0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b5d0:· | 0003b5d0:·6173·683d·2224·2872·706d·202d·5661·202d··ash="$(rpm·-Va·- | ||
| 0003b5e0:·2 | 0003b5e0:·2d6e·6f63·6f6e·6669·6720·7c20·6772·6570··-noconfig·|·grep | ||
| 0003b5f0:· | 0003b5f0:·202d·4520·275e·2e2e·3527·207c·2061·776b···-E·'^..5'·|·awk | ||
| 0003b600:· | 0003b600:·2027·7b70·7269·6e74·2024·4e46·7d27·2029···'{print·$NF}'·) | ||
| 0003b610:·2 | 0003b610:·220a·0a69·6620·5b20·2d6e·2022·2466·696c··"..if·[·-n·"$fil | ||
| 0003b620:· | 0003b620:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b630:· | 0003b630:·745f·6861·7368·2220·5d3b·2074·6865·6e0a··t_hash"·];·then. | ||
| 0003b640:· | 0003b640:·2020·2020·2320·4672·6f6d·2066·696c·6573······#·From·files | ||
| 0003b650:·2 | 0003b650:·206e·616d·6573·2067·6574·2070·6163·6b61···names·get·packa | ||
| 0003b660:· | 0003b660:·6765·206e·616d·6573·2061·6e64·2063·6861··ge·names·and·cha | ||
| 0003b670:· | 0003b670:·6e67·6520·6e65·776c·696e·6520·746f·2073··nge·newline·to·s | ||
| 0003b680:· | 0003b680:·7061·6365·2c20·6265·6361·7573·6520·7270··pace,·because·rp | ||
| 0003b690:· | 0003b690:·6d20·7772·6974·6573·2065·6163·6820·7061··m·writes·each·pa | ||
| 0003b6a0:·6 | 0003b6a0:·636b·6167·6520·746f·206e·6577·206c·696e··ckage·to·new·lin | ||
| 0003b6b0:·6 | 0003b6b0:·650a·2020·2020·7061·636b·6167·6573·5f74··e.····packages_t | ||
| 0003b6c0:·6 | 0003b6c0:·6f5f·7265·696e·7374·616c·6c3d·2224·2872··o_reinstall="$(r | ||
| 0003b6d0:· | 0003b6d0:·706d·202d·7166·2024·6669·6c65·735f·7769··pm·-qf·$files_wi | ||
| 0003b6e0:· | 0003b6e0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b6f0:·6 | 0003b6f0:·6820·7c20·7472·2027·5c6e·2720·2720·2729··h·|·tr·'\n'·'·') | ||
| 0003b700:·20 | 0003b700:·220a·0a20·2020·200a·2020·2020·7975·6d20··"..····.····yum· | ||
| 0003b710:· | 0003b710:·7265·696e·7374·616c·6c20·2d79·2024·7061··reinstall·-y·$pa | ||
| 0003b720:· | 0003b720:·636b·6167·6573·5f74·6f5f·7265·696e·7374··ckages_to_reinst | ||
| 0003b730:·616 | 0003b730:·616c·6c0a·2020·2020·0a66·690a·0a65·6c73··all.····.fi..els | ||
| 0003b740:· | 0003b740:·650a·2020·2020·2667·743b·2661·6d70·3b32··e.····>&2 | ||
| 0003b750:· | 0003b750:·2065·6368·6f20·2752·656d·6564·6961·7469···echo·'Remediati | ||
| 0003b760:·6 | 0003b760:·6f6e·2069·7320·6e6f·7420·6170·706c·6963··on·is·not·applic | ||
| 0003b770:·616 | 0003b770:·6162·6c65·2c20·6e6f·7468·696e·6720·7761··able,·nothing·wa | ||
| 0003b780:· | 0003b780:·7320·646f·6e65·270a·6669·0a3c·2f63·6f64··s·done'.fi.</cod | ||
| 0003b790:· | 0003b790:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b7a0:· | 0003b7a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b7b0:· | 0003b7b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b7c0:·6 | 0003b7c0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b7d0:·6 | 0003b7d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b7e0:· | 0003b7e0:·6d35·3934·3522·2074·6162·696e·6465·783d··m5945"·tabindex= | ||
| 0003b7f0:· | 0003b7f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b800:· | 0003b800:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b810:· | 0003b810:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b820:·6 | 0003b820:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b830:·6 | 0003b830:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b840:· | 0003b840:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | ||
| 0003b850:·20 | 0003b850:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003b860:· | 0003b860:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003b870:· | 0003b870:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b880:· | 0003b880:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b890:· | 0003b890:·3539·3435·223e·3c74·6162·6c65·2063·6c61··5945"><table·cla | ||
| 0003b8a0:· | 0003b8a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003b8b0:· | 0003b8b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003b8c0:· | 0003b8c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003b8d0:· | 0003b8d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003b8e0:· | 0003b8e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003b8f0:· | 0003b8f0:·3c74·643e·6869·6768·3c2f·7464·3e3c·2f74··<td>high</td></t | ||
| 0003b900:· | 0003b900:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b910:· | 0003b910:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003b920:· | 0003b920:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003b930:· | 0003b930:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b940:· | 0003b940:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b950:· | 0003b950:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b960:· | 0003b960:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b970:· | 0003b970:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b980:· | 0003b980:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b990:· | 0003b990:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | ||
| 0003b9a0:·6 | 0003b9a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | ||
| 0003b9b0:· | 0003b9b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | ||
| 0003b9c0:· | 0003b9c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | ||
| 0003b9d0:·7 | 0003b9d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | ||
| 0003b9e0:· | 0003b9e0:·2020·2d20·434a·4953·2d35·2e31·302e·342e····-·CJIS-5.10.4. | ||
| 0003b9f0:· | 0003b9f0:·310a·2020·2d20·4e49·5354·2d38·3030·2d31··1.··-·NIST-800-1 | ||
| 0003ba00:· | 0003ba00:·3731·2d33·2e33·2e38·0a20·202d·204e·4953··71-3.3.8.··-·NIS | ||
| 0003ba10:·5 | 0003ba10:·542d·3830·302d·3137·312d·332e·342e·310a··T-800-171-3.4.1. | ||
| 0003ba20:·202 | 0003ba20:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba30:· | 0003ba30:·4155·2d39·2833·290a·2020·2d20·4e49·5354··AU-9(3).··-·NIST | ||
| 0003ba40:· | 0003ba40:·2d38·3030·2d35·332d·434d·2d36·2863·290a··-800-53-CM-6(c). | ||
| 0003ba50:· | 0003ba50:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003ba60:· | 0003ba60:·434d·2d36·2864·290a·2020·2d20·4e49·5354··CM-6(d).··-·NIST | ||
| 0003ba70:· | 0003ba70:·2d38·3030·2d35·332d·5349·2d37·0a20·202d··-800-53-SI-7.··- | ||
| 0003ba80:· | 0003ba80:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003ba90:· | 0003ba90:·3728·3129·0a20·202d·204e·4953·542d·3830··7(1).··-·NIST-80 | ||
| 0003baa0:· | 0003baa0:·302d·3533·2d53·492d·3728·3629·0a20·202d··0-53-SI-7(6).··- | ||
| 0003bab0:·2 | 0003bab0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | ||
| 0003bac0:· | 0003bac0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | ||
| 0003bad0:· | 0003bad0:·3131·2e35·2e32·0a20·202d·2068·6967·685f··11.5.2.··-·high_ | ||
| 0003bae0:·6 | 0003bae0:·636f·6d70·6c65·7869·7479·0a20·202d·2068··complexity.··-·h | ||
| 0003baf0:·6 | 0003baf0:·6967·685f·7365·7665·7269·7479·0a20·202d··igh_severity.··- | ||
| 0003bb00:· | 0003bb00:·206d·6564·6975·6d5f·6469·7372·7570·7469···medium_disrupti | ||
| 0003bb10:·6 | 0003bb10:·6f6e·0a20·202d·206e·6f5f·7265·626f·6f74··on.··-·no_reboot | ||
| 0003bb20:· | 0003bb20:·5f6e·6565·6465·640a·2020·2d20·7265·7374··_needed.··-·rest | ||
| 0003bb30:·69 | 0003bb30:·7269·6374·5f73·7472·6174·6567·790a·2020··rict_strategy.·· | ||
| 0003bb40:· | 0003bb40:·2d20·7270·6d5f·7665·7269·6679·5f68·6173··-·rpm_verify_has | ||
| 0003bb50:·6 | 0003bb50:·6865·730a·0a2d·206e·616d·653a·2027·5365··hes..-·name:·'Se | ||
| 0003bb60:· | 0003bb60:·7420·6661·6374·3a20·5061·636b·6167·6520··t·fact:·Package· | ||
| Max diff block lines reached; 15896768/15951720 bytes (99.66%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 33 lines modified | ||
| 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 108 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 109 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 110 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 111 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 113 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 117 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 119 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 120 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 121 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 122 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 123 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 124 | fi | ||
| 125 | else | ||
| 126 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 127 | fi | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 120 | -·name:·Gather·the·package·facts | 133 | -·name:·Gather·the·package·facts |
| 121 | ··package_facts: | 134 | ··package_facts: |
| Offset 282, 33 lines modified | Offset 301, 14 lines modified | ||
| 282 | ··-·PCI-DSSv4-11.5.2 | 301 | ··-·PCI-DSSv4-11.5.2 |
| 283 | ··-·high_complexity | 302 | ··-·high_complexity |
| 284 | ··-·high_severity | 303 | ··-·high_severity |
| 285 | ··-·medium_disruption | 304 | ··-·medium_disruption |
| 286 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 287 | ··-·restrict_strategy | 306 | ··-·restrict_strategy |
| 288 | ··-·rpm_verify_hashes | 307 | ··-·rpm_verify_hashes |
| 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 290 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 291 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 292 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 293 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 294 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 295 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 296 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 297 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 298 | fi | ||
| 299 | else | ||
| 300 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 301 | fi | ||
| 302 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 308 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 303 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 309 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 304 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 310 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 305 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 311 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 306 | $·rpm·-qf·FILENAME | 312 | $·rpm·-qf·FILENAME |
| 307 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 313 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 329, 14 lines modified | Offset 329, 50 lines modified | ||
| 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 329 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 330 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 331 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 332 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 333 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 334 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 335 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 341 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 342 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 343 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 344 | declare·-A·SETPERMS_RPM_DICT | ||
| 345 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 346 | #·is·expected·by·the·RPM·database | ||
| 347 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 348 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 349 | do | ||
| 350 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 351 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 352 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 353 | ········do | ||
| 354 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 355 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 356 | ········done | ||
| 357 | done | ||
| 358 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 359 | #·correct·values | ||
| 360 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 361 | do | ||
| 362 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 363 | done | ||
| 364 | else | ||
| 365 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 366 | fi | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 337 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 368 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 338 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 369 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 339 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 370 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 340 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 371 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 341 | -·name:·Gather·the·package·facts | 372 | -·name:·Gather·the·package·facts |
| 342 | ··package_facts: | 373 | ··package_facts: |
| Offset 448, 50 lines modified | Offset 484, 14 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 484 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·high_complexity | 485 | ··-·high_complexity |
| 450 | ··-·high_severity | 486 | ··-·high_severity |
| 451 | ··-·medium_disruption | 487 | ··-·medium_disruption |
| 452 | ··-·no_reboot_needed | 488 | ··-·no_reboot_needed |
| 453 | ··-·restrict_strategy | 489 | ··-·restrict_strategy |
| 454 | ··-·rpm_verify_permissions | 490 | ··-·rpm_verify_permissions |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1235832/1243916 bytes (99.35%) of diff not shown. | |||
| Offset 15173, 408 lines modified | Offset 15173, 408 lines modified | ||
| 0003b440:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b440:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b450:·3934·3422·2074·6162·696e·6465·783d·2230··944"·tabindex="0 | 0003b450:·3934·3422·2074·6162·696e·6465·783d·2230··944"·tabindex="0 | ||
| 0003b460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4b0:·6961·7469·6f6e·20 | 0003b4b0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b4c0:·6 | 0003b4c0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b4d0:· | 0003b4d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b4e0:· | 0003b4e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b4f0:· | 0003b4f0:·7365·2220·6964·3d22·6964·6d35·3934·3422··se"·id="idm5944" | ||
| 0003b500:·3 | 0003b500:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b510:· | 0003b510:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b520:· | 0003b520:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b530:·6 | 0003b530:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b540:· | 0003b540:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b550:· | 0003b550:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b560:· | 0003b560:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b570:· | 0003b570:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b580:· | 0003b580:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b590:· | 0003b590:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b5a0:· | 0003b5a0:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b5b0:·3 | 0003b5b0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b5c0:· | 0003b5c0:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b5d0:· | 0003b5d0:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b5e0:·74 | 0003b5e0:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b5f0:·2 | 0003b5f0:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b600:· | 0003b600:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b610:·20 | 0003b610:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b620:·74 | 0003b620:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b630:· | 0003b630:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b640:·206 | 0003b640:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b650:· | 0003b650:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b660:· | 0003b660:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b670:· | 0003b670:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b680:· | 0003b680:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b690:· | 0003b690:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b6a0:·2d | 0003b6a0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b6b0:· | 0003b6b0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b6c0:· | 0003b6c0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b6d0:· | 0003b6d0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b6e0:· | 0003b6e0:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b6f0:· | 0003b6f0:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b700:· | 0003b700:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b710:· | 0003b710:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b720:· | 0003b720:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b730:· | 0003b730:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b740:·2 | 0003b740:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b750:·6 | 0003b750:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b760:· | 0003b760:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b770:· | 0003b770:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b780:· | 0003b780:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b790:·6 | 0003b790:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b7a0:· | 0003b7a0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b7b0:· | 0003b7b0:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | ||
| 0003b7c0:· | 0003b7c0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b7d0:·6 | 0003b7d0:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b7e0:·6 | 0003b7e0:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b7f0:· | 0003b7f0:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b800:·6 | 0003b800:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b810:· | 0003b810:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b820:·6 | 0003b820:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b830:· | 0003b830:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b840:· | 0003b840:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b850:·6 | 0003b850:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b860:· | 0003b860:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b870:·6 | 0003b870:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b880:·6 | 0003b880:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b890:· | 0003b890:·3539·3435·2220·7461·6269·6e64·6578·3d22··5945"·tabindex=" | ||
| 0003b8a0:· | 0003b8a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b8b0:· | 0003b8b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b8c0:·6 | 0003b8c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b8d0:·7 | 0003b8d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b8e0:· | 0003b8e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b8f0:· | 0003b8f0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b900:· | 0003b900:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b910:·6 | 0003b910:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b920:·6 | 0003b920:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b930:· | 0003b930:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b940:· | 0003b940:·3934·3522·3e3c·7461·626c·6520·636c·6173··945"><table·clas | ||
| 0003b950:·733 | 0003b950:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b960:· | 0003b960:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003b970:· | 0003b970:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003b980:· | 0003b980:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003b990:· | 0003b990:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003b9a0:· | 0003b9a0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003b9b0:· | 0003b9b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b9c0:·6 | 0003b9c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003b9d0:· | 0003b9d0:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003b9e0:· | 0003b9e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b9f0:· | 0003b9f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba00:· | 0003ba00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003ba10:· | 0003ba10:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003ba20:· | 0003ba20:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003ba30:·3 | 0003ba30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003ba40:· | 0003ba40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003ba50:· | 0003ba50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003ba60:· | 0003ba60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003ba70:· | 0003ba70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003ba80:· | 0003ba80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003ba90:· | 0003ba90:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003baa0:· | 0003baa0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bab0:· | 0003bab0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bac0:· | 0003bac0:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bad0:·2 | 0003bad0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bae0:· | 0003bae0:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003baf0:· | 0003baf0:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bb00:· | 0003bb00:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bb10:· | 0003bb10:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bb20:· | 0003bb20:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bb30:· | 0003bb30:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bb40:·2 | 0003bb40:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bb50:·2d | 0003bb50:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bb60:· | 0003bb60:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bb70:· | 0003bb70:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bb80:· | 0003bb80:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bb90:·6 | 0003bb90:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bba0:·6 | 0003bba0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bbb0:·6 | 0003bbb0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bbc0:· | 0003bbc0:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bbd0:·6 | 0003bbd0:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bbe0:·6674· | 0003bbe0:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bbf0:· | 0003bbf0:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bc00:·6 | 0003bc00:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| 0003bc10:· | 0003bc10:·2066·6163·743a·2050·6163·6b61·6765·206d···fact:·Package·m | ||
| Max diff block lines reached; 11231643/11286595 bytes (99.51%) of diff not shown. | |||
| Offset 109, 14 lines modified | Offset 109, 33 lines modified | ||
| 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 118 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 126 | else | ||
| 127 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 128 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 122 | ··package_facts: | 135 | ··package_facts: |
| Offset 283, 33 lines modified | Offset 302, 14 lines modified | ||
| 283 | ··-·PCI-DSSv4-11.5.2 | 302 | ··-·PCI-DSSv4-11.5.2 |
| 284 | ··-·high_complexity | 303 | ··-·high_complexity |
| 285 | ··-·high_severity | 304 | ··-·high_severity |
| 286 | ··-·medium_disruption | 305 | ··-·medium_disruption |
| 287 | ··-·no_reboot_needed | 306 | ··-·no_reboot_needed |
| 288 | ··-·restrict_strategy | 307 | ··-·restrict_strategy |
| 289 | ··-·rpm_verify_hashes | 308 | ··-·rpm_verify_hashes |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 293 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 294 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 295 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 296 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 297 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 298 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 299 | fi | ||
| 300 | else | ||
| 301 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 302 | fi | ||
| 303 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 309 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 304 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 310 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 305 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 311 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 306 | run·the·following·command·to·determine·which·package·owns·it: | 312 | run·the·following·command·to·determine·which·package·owns·it: |
| 307 | $·rpm·-qf·FILENAME | 313 | $·rpm·-qf·FILENAME |
| 308 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 314 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 309 | $·sudo·rpm·--restore·PACKAGENAME | 315 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 328, 14 lines modified | Offset 328, 46 lines modified | ||
| 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 328 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 329 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 329 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 330 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 330 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 331 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 331 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 332 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 333 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 333 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 334 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 340 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 341 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 342 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 343 | declare·-A·SETPERMS_RPM_DICT | ||
| 344 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 345 | #·is·expected·by·the·RPM·database | ||
| 346 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 347 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 348 | do | ||
| 349 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 350 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 351 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 352 | done | ||
| 353 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 354 | #·correct·values | ||
| 355 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 356 | do | ||
| 357 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 358 | done | ||
| 359 | else | ||
| 360 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 361 | fi | ||
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 336 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 337 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 338 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 339 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 340 | -·name:·Gather·the·package·facts | 367 | -·name:·Gather·the·package·facts |
| 341 | ··package_facts: | 368 | ··package_facts: |
| Offset 443, 46 lines modified | Offset 475, 14 lines modified | ||
| 443 | ··-·PCI-DSSv4-11.5.2 | 475 | ··-·PCI-DSSv4-11.5.2 |
| 444 | ··-·high_complexity | 476 | ··-·high_complexity |
| 445 | ··-·high_severity | 477 | ··-·high_severity |
| 446 | ··-·medium_disruption | 478 | ··-·medium_disruption |
| 447 | ··-·no_reboot_needed | 479 | ··-·no_reboot_needed |
| 448 | ··-·restrict_strategy | 480 | ··-·restrict_strategy |
| 449 | ··-·rpm_verify_ownership | 481 | ··-·rpm_verify_ownership |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1117080/1124791 bytes (99.31%) of diff not shown. | |||
| Offset 15009, 258 lines modified | Offset 15009, 258 lines modified | ||
| 0003aa00:·6765·743d·2223·6964·6d36·3737·3122·2074··get="#idm6771"·t | 0003aa00:·6765·743d·2223·6964·6d36·3737·3122·2074··get="#idm6771"·t | ||
| 0003aa10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003aa10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003aa20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003aa20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003aa30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003aa30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aa40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aa40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aa50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aa50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aa60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aa60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aa70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003aa80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aa90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003aaa0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aab0:·2069·643d·2269·646d·3637·3731·223e·3c74···id="idm6771"><t | |||
| 0003aac0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003aad0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003aae0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003aaf0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003a | 0003aa70:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003aa80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aa90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aaa0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aab0:·3d22·6964·6d36·3737·3122·3e3c·7072·653e··="idm6771"><pre> | |||
| 0003aac0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003aad0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003aae0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003aaf0:·6e20·706c·6174·666f·726d·730a·6966·2028··n·platforms.if·( | |||
| 0003ab00:·2021·2028·205b·2022·247b·636f·6e74·6169···!·(·[·"${contai | |||
| 0003ab10:·6e65·723a·2d7d·2220·3d3d·2022·6277·7261··ner:-}"·==·"bwra | |||
| 0003ab20:·702d·6f73·6275·696c·6422·205d·2029·2026··p-osbuild"·]·)·& | |||
| 0003ab30:·616d·703b·2661·6d70·3b20·7270·6d20·2d2d··amp;&·rpm·-- | |||
| 0003ab40:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | |||
| 0003ab50:·7c7c·2072·706d·202d·2d71·7569·6574·202d··||·rpm·--quiet·- | |||
| 0003ab60:·7120·6b65·726e·656c·2d75·656b·2029·2026··q·kernel-uek·)·& | |||
| 0003ab70:·616d·703b·2661·6d70·3b20·7b20·2120·2820··amp;&·{·!·(· | |||
| 0003ab80:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 0003ab90:·206b·6572·6e65·6c20·3b7d·2026·616d·703b···kernel·;}·& | |||
| 0003aba0:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | |||
| 0003abb0:·6965·7420·2d71·2072·706d·2d6f·7374·7265··iet·-q·rpm-ostre | |||
| 0003abc0:·6520·3b7d·2026·616d·703b·2661·6d70·3b20··e·;}·&&· | |||
| 0003abd0:·7b20·7270·6d20·2d2d·7175·6965·7420·2d71··{·rpm·--quiet·-q | |||
| 0003abe0:·2062·6f6f·7463·203b·7d20·2661·6d70·3b26···bootc·;}·&& | |||
| 0003abf0:·616d·703b·207b·2021·2072·706d·202d·2d71··amp;·{·!·rpm·--q | |||
| 0003ac00:·7569·6574·202d·7120·6f70·656e·7368·6966··uiet·-q·openshif | |||
| 0003ac10:·742d·6b75·6265·6c65·7420·3b7d·2029·3b20··t-kubelet·;}·);· | |||
| 0003ac20:·7d3b·2074·6865·6e0a·0a66·6970·732d·6d6f··};·then..fips-mo | |||
| 0003ac30:·6465·2d73·6574·7570·202d·2d65·6e61·626c··de-setup·--enabl | |||
| 0003ac40:·650a·4649·5053·5f43·4f4e·463d·222f·6574··e.FIPS_CONF="/et | |||
| 0003ac50:·632f·6472·6163·7574·2e63·6f6e·662e·642f··c/dracut.conf.d/ | |||
| 0003ac60:·3430·2d66·6970·732e·636f·6e66·220a·6966··40-fips.conf".if | |||
| 0003ac70:·2021·2067·7265·7020·225e·6164·645f·6472···!·grep·"^add_dr | |||
| 0003ac80:·6163·7574·6d6f·6475·6c65·732b·3d5c·2220··acutmodules+=\"· | |||
| 0003ac90:·6669·7073·205c·2222·2024·4649·5053·5f43··fips·\""·$FIPS_C | |||
| 0003aca0:·4f4e·463b·2074·6865·6e0a·2020·2020·6563··ONF;·then.····ec | |||
| 0003acb0:·686f·2022·6164·645f·6472·6163·7574·6d6f··ho·"add_dracutmo | |||
| 0003acc0:·6475·6c65·732b·3d5c·2220·6669·7073·205c··dules+=\"·fips·\ | |||
| 0003acd0:·2222·2026·6774·3b26·6774·3b20·2446·4950··""·>>·$FIP | |||
| 0003ace0:·535f·434f·4e46·0a66·690a·0a65·6c73·650a··S_CONF.fi..else. | |||
| 0003acf0:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | |||
| 0003ad00:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | |||
| 0003ad10:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | |||
| 0003ad20:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | |||
| 0003ad30:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | |||
| 0003ad40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ad50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ad60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ad70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ad80:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003ad90:·3737·3222·2074·6162·696e·6465·783d·2230··772"·tabindex="0 | |||
| 0003ada0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003adb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003adc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003add0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ade0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003adf0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003ae00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ae10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ae20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ae30:·6c61·7073·6522·2069·643d·2269·646d·3637··lapse"·id="idm67 | |||
| 0003ae40:·3732·223e·3c74·6162·6c65·2063·6c61·7373··72"><table·class | |||
| 0003ae50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003ae60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003ae70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ae80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ae90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003aea0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0003aeb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a | 0003aec0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | ||
| 0003a | 0003aed0:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | ||
| 0003ab30:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003a | 0003aee0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003aef0:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0003a | 0003af00:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003a | 0003af10:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003a | 0003af20:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003af30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003af40:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003af50:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003af60:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003af70:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003af80:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003ab80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003ab90:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003aba0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003abb0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003abc0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003abd0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003abe0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003abf0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003ac00:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003ac10:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003a | 0003af90:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003a | 0003afa0:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | ||
| 0003a | 0003afb0:·3830·302d·3533·2d49·412d·370a·2020·2d20··800-53-IA-7.··-· | ||
| 0003a | 0003afc0:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | ||
| 0003ac60:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003ac70:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003ac80:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003ac90:·2d31·330a·2020·2d20·656e·6162·6c65·5f64··-13.··-·enable_d | |||
| 0003aca0:·7261·6375·745f·6669·7073·5f6d·6f64·756c··racut_fips_modul | |||
| 0003acb0:·650a·2020·2d20·6869·6768·5f73·6576·6572··e.··-·high_sever | |||
| 0003acc0:·6974·790a·2020·2d20·6d65·6469·756d·5f63··ity.··-·medium_c | |||
| 0003acd0:·6f6d·706c·6578·6974·790a·2020·2d20·6d65··omplexity.··-·me | |||
| 0003ace0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | |||
| 0003acf0:·2020·2d20·7265·626f·6f74·5f72·6571·7569····-·reboot_requi | |||
| 0003ad00:·7265·640a·2020·2d20·7265·7374·7269·6374··red.··-·restrict | |||
| 0003ad10:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | |||
| 0003ad20:·653a·2043·6865·636b·2074·6f20·7365·6520··e:·Check·to·see· | |||
| 0003ad30:·7468·6520·6375·7272·656e·7420·7374·6174··the·current·stat | |||
| Max diff block lines reached; 4985725/5019977 bytes (99.32%) of diff not shown. | |||
| Offset 89, 14 lines modified | Offset 89, 27 lines modified | ||
| 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module | 89 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_dracut_fips_module |
| 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 | 90 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-002450,·CCI-000068,·CCI-002418,·CCI-000877 |
| 91 | ············_\x8i_\x8s_\x8m······1446 | 91 | ············_\x8i_\x8s_\x8m······1446 |
| 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 92 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 93 | ············_\x8n_\x8i_\x8s_\x8t·····SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 | 94 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_RBG_EXT.1 |
| 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 | 95 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223 |
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 97 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 98 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 99 | fips-mode-setup·--enable | ||
| 100 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 101 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 102 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 103 | fi | ||
| 104 | else | ||
| 105 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 106 | fi | ||
| 96 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 97 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 98 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 99 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 101 | -·name:·Gather·the·package·facts | 112 | -·name:·Gather·the·package·facts |
| 102 | ··package_facts: | 113 | ··package_facts: |
| Offset 182, 27 lines modified | Offset 195, 14 lines modified | ||
| 182 | ··-·NIST-800-53-SC-13 | 195 | ··-·NIST-800-53-SC-13 |
| 183 | ··-·enable_dracut_fips_module | 196 | ··-·enable_dracut_fips_module |
| 184 | ··-·high_severity | 197 | ··-·high_severity |
| 185 | ··-·medium_complexity | 198 | ··-·medium_complexity |
| 186 | ··-·medium_disruption | 199 | ··-·medium_disruption |
| 187 | ··-·reboot_required | 200 | ··-·reboot_required |
| 188 | ··-·restrict_strategy | 201 | ··-·restrict_strategy |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 191 | if·(·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·&&·rpm·--quiet·-q·kernel·||·rpm·--quiet·-q·kernel-uek·)·&&·{·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·};·then | ||
| 192 | fips-mode-setup·--enable | ||
| 193 | FIPS_CONF="/etc/dracut.conf.d/40-fips.conf" | ||
| 194 | if·!·grep·"^add_dracutmodules+=\"·fips·\""·$FIPS_CONF;·then | ||
| 195 | ····echo·"add_dracutmodules+=\"·fips·\""·>>·$FIPS_CONF | ||
| 196 | fi | ||
| 197 | else | ||
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 199 | fi | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | To·enable·FIPS·mode,·run·the·following·command: | 203 | To·enable·FIPS·mode,·run·the·following·command: |
| 202 | fips-mode-setup·--enable | 204 | fips-mode-setup·--enable |
| 203 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: | 205 | The·fips-mode-setup·command·will·configure·the·system·in·FIPS·mode·by·automatically·configuring·the·following: |
| 204 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 | 206 | ····*·Setting·the·kernel·FIPS·mode·flag·(/proc/sys/crypto/fips_enabled)·to·1 |
| 205 | ····*·Creating·/etc/system-fips | 207 | ····*·Creating·/etc/system-fips |
| Offset 251, 63 lines modified | Offset 251, 63 lines modified | ||
| 251 | $·sudo·yum·install·crypto-policies | 251 | $·sudo·yum·install·crypto-policies |
| 252 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 252 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 253 | Severity: ··medium | 253 | Severity: ··medium |
| 254 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 254 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 255 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 255 | ············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 256 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 256 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 257 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 259 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 260 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 261 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 262 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 263 | -·name:·Ensure·crypto-policies·is·installed | ||
| 264 | ··package: | ||
| 265 | ····name:·crypto-policies | ||
| 266 | ····state:·present | ||
| 267 | ··tags: | ||
| 268 | ··-·enable_strategy | ||
| 269 | ··-·low_complexity | ||
| 270 | ··-·low_disruption | ||
| 271 | ··-·medium_severity | ||
| 272 | ··-·no_reboot_needed | ||
| 273 | ··-·package_crypto-policies_installed | ||
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 258 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 275 | [[packages]] | 259 | [[packages]] |
| 276 | name·=·"crypto-policies" | 260 | name·=·"crypto-policies" |
| 277 | version·=·"*" | 261 | version·=·"*" |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 280 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 281 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 282 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 283 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 284 | ····yum·install·-y·"crypto-policies" | ||
| 285 | fi | ||
| 286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 262 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 263 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 264 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 265 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 266 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 291 | include·install_crypto-policies | 267 | include·install_crypto-policies |
| 292 | class·install_crypto-policies·{ | 268 | class·install_crypto-policies·{ |
| 293 | ··package·{·'crypto-policies': | 269 | ··package·{·'crypto-policies': |
| 294 | ····ensure·=>·'installed', | 270 | ····ensure·=>·'installed', |
| 295 | ··} | 271 | ··} |
| 296 | } | 272 | } |
| 273 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 274 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 275 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 276 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 277 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 278 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | ||
| 279 | ····yum·install·-y·"crypto-policies" | ||
| 280 | fi | ||
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 281 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 298 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 282 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 299 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 283 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 300 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 284 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 301 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 285 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 302 | package·--add=crypto-policies | 286 | package·--add=crypto-policies |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 292 | -·name:·Ensure·crypto-policies·is·installed | ||
| Max diff block lines reached; 593179/599212 bytes (98.99%) of diff not shown. | |||
| Offset 15161, 408 lines modified | Offset 15161, 408 lines modified | ||
| 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b380:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b390:·646d·3539·3434·2220·7461·6269·6e64·6578··dm5944"·tabindex | 0003b390:·646d·3539·3434·2220·7461·6269·6e64·6578··dm5944"·tabindex | ||
| 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b3a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b3b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b3c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b3d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b3e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3f0:·6d65·6469·6174·696f·6e20· | 0003b3f0:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003b400:· | 0003b400:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b410:· | 0003b410:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b420:· | 0003b420:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b430:·6 | 0003b430:·6c61·7073·6522·2069·643d·2269·646d·3539··lapse"·id="idm59 | ||
| 0003b440:· | 0003b440:·3434·223e·3c70·7265·3e3c·636f·6465·3e23··44"><pre><code># | ||
| 0003b450:· | 0003b450:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b460:· | 0003b460:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b470:·6 | 0003b470:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003b480:·6 | 0003b480:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | ||
| 0003b490:· | 0003b490:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | ||
| 0003b4a0:· | 0003b4a0:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | ||
| 0003b4b0:· | 0003b4b0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b4c0:· | 0003b4c0:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | ||
| 0003b4d0:· | 0003b4d0:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b4e0:· | 0003b4e0:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | ||
| 0003b4f0:·746 | 0003b4f0:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | ||
| 0003b500:· | 0003b500:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | ||
| 0003b510:· | 0003b510:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | ||
| 0003b520:· | 0003b520:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | ||
| 0003b530:· | 0003b530:·0a0a·2320·4669·6e64·2077·6869·6368·2066··..#·Find·which·f | ||
| 0003b540:·6 | 0003b540:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | ||
| 0003b550:·6 | 0003b550:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | ||
| 0003b560:· | 0003b560:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | ||
| 0003b570:·66 | 0003b570:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | ||
| 0003b580:·6 | 0003b580:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | ||
| 0003b590:· | 0003b590:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | ||
| 0003b5a0:· | 0003b5a0:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | ||
| 0003b5b0:· | 0003b5b0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b5c0:·5 | 0003b5c0:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | ||
| 0003b5d0:· | 0003b5d0:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | ||
| 0003b5e0:· | 0003b5e0:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | ||
| 0003b5f0:· | 0003b5f0:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | ||
| 0003b600:· | 0003b600:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | ||
| 0003b610:· | 0003b610:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b620:· | 0003b620:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | ||
| 0003b630:· | 0003b630:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | ||
| 0003b640:· | 0003b640:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | ||
| 0003b650:· | 0003b650:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | ||
| 0003b660:· | 0003b660:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | ||
| 0003b670:·2 | 0003b670:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | ||
| 0003b680:· | 0003b680:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | ||
| 0003b690:· | 0003b690:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | ||
| 0003b6a0:·6 | 0003b6a0:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | ||
| 0003b6b0:· | 0003b6b0:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | ||
| 0003b6c0:· | 0003b6c0:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | ||
| 0003b6d0:·7 | 0003b6d0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b6e0:· | 0003b6e0:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | ||
| 0003b6f0:·2 | 0003b6f0:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | ||
| 0003b700:· | 0003b700:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | ||
| 0003b710:· | 0003b710:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b720:· | 0003b720:·7374·616c·6c0a·2020·2020·0a66·690a·0a65··stall.····.fi..e | ||
| 0003b730:·6c | 0003b730:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 0003b740:· | 0003b740:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 0003b750:· | 0003b750:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 0003b760:· | 0003b760:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 0003b770:· | 0003b770:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 0003b780:·6 | 0003b780:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b790:· | 0003b790:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b7a0:·6 | 0003b7a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b7b0:· | 0003b7b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b7c0:·2220·6 | 0003b7c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b7d0:· | 0003b7d0:·6964·6d35·3934·3522·2074·6162·696e·6465··idm5945"·tabinde | ||
| 0003b7e0:· | 0003b7e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b7f0:·6 | 0003b7f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b800:·6 | 0003b800:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b810:· | 0003b810:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b820:· | 0003b820:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b830:· | 0003b830:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b840:· | 0003b840:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b850:· | 0003b850:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b860:· | 0003b860:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b870:· | 0003b870:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b880:· | 0003b880:·646d·3539·3435·223e·3c74·6162·6c65·2063··dm5945"><table·c | ||
| 0003b890:· | 0003b890:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b8a0:· | 0003b8a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b8b0:· | 0003b8b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b8c0:· | 0003b8c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b8d0:· | 0003b8d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b8e0:· | 0003b8e0:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003b8f0:·2 | 0003b8f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b900:· | 0003b900:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b910:· | 0003b910:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003b920:· | 0003b920:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b930:·2 | 0003b930:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b940:· | 0003b940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b950:· | 0003b950:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003b960:·3 | 0003b960:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003b970:· | 0003b970:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003b980:· | 0003b980:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003b990:· | 0003b990:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003b9a0:· | 0003b9a0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003b9b0:· | 0003b9b0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003b9c0:· | 0003b9c0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003b9d0:· | 0003b9d0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003b9e0:· | 0003b9e0:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003b9f0:· | 0003b9f0:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003ba00:· | 0003ba00:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003ba10:· | 0003ba10:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003ba20:· | 0003ba20:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003ba30:· | 0003ba30:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003ba40:·2 | 0003ba40:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003ba50:· | 0003ba50:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003ba60:· | 0003ba60:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003ba70:· | 0003ba70:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003ba80:· | 0003ba80:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003ba90:· | 0003ba90:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003baa0:· | 0003baa0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003bab0:· | 0003bab0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003bac0:· | 0003bac0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003bad0:·6 | 0003bad0:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003bae0:· | 0003bae0:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003baf0:·202 | 0003baf0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003bb00:· | 0003bb00:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003bb10:·6 | 0003bb10:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003bb20:·73 | 0003bb20:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003bb30:· | 0003bb30:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003bb40:· | 0003bb40:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003bb50:· | 0003bb50:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| Max diff block lines reached; 16251045/16305997 bytes (99.66%) of diff not shown. | |||
| Offset 106, 14 lines modified | Offset 106, 33 lines modified | ||
| 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 106 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 107 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 114 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 115 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 116 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 117 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 118 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 119 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 120 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 121 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 122 | fi | ||
| 123 | else | ||
| 124 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 125 | fi | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 118 | -·name:·Gather·the·package·facts | 131 | -·name:·Gather·the·package·facts |
| 119 | ··package_facts: | 132 | ··package_facts: |
| Offset 280, 33 lines modified | Offset 299, 14 lines modified | ||
| 280 | ··-·PCI-DSSv4-11.5.2 | 299 | ··-·PCI-DSSv4-11.5.2 |
| 281 | ··-·high_complexity | 300 | ··-·high_complexity |
| 282 | ··-·high_severity | 301 | ··-·high_severity |
| 283 | ··-·medium_disruption | 302 | ··-·medium_disruption |
| 284 | ··-·no_reboot_needed | 303 | ··-·no_reboot_needed |
| 285 | ··-·restrict_strategy | 304 | ··-·restrict_strategy |
| 286 | ··-·rpm_verify_hashes | 305 | ··-·rpm_verify_hashes |
| 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 288 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 289 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 290 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 291 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 292 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 293 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 294 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 295 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 296 | fi | ||
| 297 | else | ||
| 298 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 299 | fi | ||
| 300 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 306 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 301 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 307 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 302 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 308 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 303 | run·the·following·command·to·determine·which·package·owns·it: | 309 | run·the·following·command·to·determine·which·package·owns·it: |
| 304 | $·rpm·-qf·FILENAME | 310 | $·rpm·-qf·FILENAME |
| 305 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 311 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 306 | $·sudo·rpm·--restore·PACKAGENAME | 312 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 325, 14 lines modified | Offset 325, 46 lines modified | ||
| 325 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 325 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 326 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 326 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 327 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 328 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 329 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 330 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 331 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 337 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 338 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 339 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 340 | declare·-A·SETPERMS_RPM_DICT | ||
| 341 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 342 | #·is·expected·by·the·RPM·database | ||
| 343 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 344 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 345 | do | ||
| 346 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 347 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 348 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 349 | done | ||
| 350 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 351 | #·correct·values | ||
| 352 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 353 | do | ||
| 354 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 355 | done | ||
| 356 | else | ||
| 357 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 358 | fi | ||
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 337 | -·name:·Gather·the·package·facts | 364 | -·name:·Gather·the·package·facts |
| 338 | ··package_facts: | 365 | ··package_facts: |
| Offset 440, 46 lines modified | Offset 472, 14 lines modified | ||
| 440 | ··-·PCI-DSSv4-11.5.2 | 472 | ··-·PCI-DSSv4-11.5.2 |
| 441 | ··-·high_complexity | 473 | ··-·high_complexity |
| 442 | ··-·high_severity | 474 | ··-·high_severity |
| 443 | ··-·medium_disruption | 475 | ··-·medium_disruption |
| 444 | ··-·no_reboot_needed | 476 | ··-·no_reboot_needed |
| 445 | ··-·restrict_strategy | 477 | ··-·restrict_strategy |
| 446 | ··-·rpm_verify_ownership | 478 | ··-·rpm_verify_ownership |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1561989/1569568 bytes (99.52%) of diff not shown. | |||
| Offset 15091, 408 lines modified | Offset 15091, 408 lines modified | ||
| 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af30:·2223·6964·6d35·3934·3422·2074·6162·696e··"#idm5944"·tabin | 0003af30:·2223·6964·6d35·3934·3422·2074·6162·696e··"#idm5944"·tabin | ||
| 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003af60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003af70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003af80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003af90:·3e52·656d·6564·6961·7469·6f6e·20 | 0003af90:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003afa0:·6 | 0003afa0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003afb0:·3 | 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003afc0:· | 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003afd0:· | 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003afe0:· | 0003afe0:·6d35·3934·3422·3e3c·7072·653e·3c63·6f64··m5944"><pre><cod | ||
| 0003aff0:· | 0003aff0:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b000:·6 | 0003b000:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b010:·6 | 0003b010:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b020:· | 0003b020:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b030:· | 0003b030:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b040:· | 0003b040:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b050:· | 0003b050:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b060:·7 | 0003b060:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b070:· | 0003b070:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b080:· | 0003b080:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b090:· | 0003b090:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b0a0:· | 0003b0a0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b0b0:· | 0003b0b0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b0c0:· | 0003b0c0:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b0d0:· | 0003b0d0:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b0e0:·6 | 0003b0e0:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b0f0:· | 0003b0f0:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b100:· | 0003b100:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b110:·6 | 0003b110:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b120:· | 0003b120:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b130:·6 | 0003b130:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b140:· | 0003b140:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b150:· | 0003b150:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b160:· | 0003b160:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b170:· | 0003b170:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b180:·2 | 0003b180:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b190:· | 0003b190:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b1a0:· | 0003b1a0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b1b0:·2 | 0003b1b0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b1c0:· | 0003b1c0:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b1d0:· | 0003b1d0:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b1e0:· | 0003b1e0:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b1f0:· | 0003b1f0:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b200:· | 0003b200:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b210:·2 | 0003b210:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b220:· | 0003b220:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b230:·6 | 0003b230:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b240:· | 0003b240:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b250:· | 0003b250:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b260:· | 0003b260:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b270:·6 | 0003b270:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b280:·7 | 0003b280:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b290:· | 0003b290:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b2a0:· | 0003b2a0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b2b0:· | 0003b2b0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b2c0:·6 | 0003b2c0:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b2d0:· | 0003b2d0:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b2e0:· | 0003b2e0:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b2f0:·6 | 0003b2f0:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b300:· | 0003b300:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b310:·6 | 0003b310:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b320:· | 0003b320:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b330:· | 0003b330:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b340:· | 0003b340:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b350:· | 0003b350:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b360:·7 | 0003b360:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b370:· | 0003b370:·3d22·2369·646d·3539·3435·2220·7461·6269··="#idm5945"·tabi | ||
| 0003b380:· | 0003b380:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b390:· | 0003b390:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b3a0:· | 0003b3a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b3b0:· | 0003b3b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b3c0:· | 0003b3c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b3d0:· | 0003b3d0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b3e0:· | 0003b3e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b3f0:· | 0003b3f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b400:· | 0003b400:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b410:· | 0003b410:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b420:· | 0003b420:·3d22·6964·6d35·3934·3522·3e3c·7461·626c··="idm5945"><tabl | ||
| 0003b430:· | 0003b430:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b440:· | 0003b440:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b450:· | 0003b450:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b460:· | 0003b460:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b470:·3 | 0003b470:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b480:· | 0003b480:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b490:· | 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b4a0:· | 0003b4a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b4b0:· | 0003b4b0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b4c0:· | 0003b4c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b4d0:· | 0003b4d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b4e0:·3 | 0003b4e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b4f0:· | 0003b4f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b500:· | 0003b500:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b510:· | 0003b510:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b520:· | 0003b520:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b530:·20 | 0003b530:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b540:·6 | 0003b540:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b550:·65 | 0003b550:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b560:· | 0003b560:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b570:·6 | 0003b570:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b580:· | 0003b580:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b590:· | 0003b590:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b5a0:· | 0003b5a0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b5b0:· | 0003b5b0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b5c0:· | 0003b5c0:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b5d0:·20 | 0003b5d0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b5e0:· | 0003b5e0:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b5f0:· | 0003b5f0:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b600:· | 0003b600:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b610:· | 0003b610:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b620:· | 0003b620:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b630:· | 0003b630:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b640:· | 0003b640:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b650:· | 0003b650:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b660:· | 0003b660:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b670:· | 0003b670:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b680:· | 0003b680:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b690:· | 0003b690:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b6a0:· | 0003b6a0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b6b0:·6 | 0003b6b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b6c0:· | 0003b6c0:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b6d0:· | 0003b6d0:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b6e0:·7 | 0003b6e0:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b6f0:· | 0003b6f0:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 9446850/9501802 bytes (99.42%) of diff not shown. | |||
| Offset 93, 14 lines modified | Offset 93, 33 lines modified | ||
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 95 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 96 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 97 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 99 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 102 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 103 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 104 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 105 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 106 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 107 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 108 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 109 | fi | ||
| 110 | else | ||
| 111 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 112 | fi | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 105 | -·name:·Gather·the·package·facts | 118 | -·name:·Gather·the·package·facts |
| 106 | ··package_facts: | 119 | ··package_facts: |
| Offset 267, 33 lines modified | Offset 286, 14 lines modified | ||
| 267 | ··-·PCI-DSSv4-11.5.2 | 286 | ··-·PCI-DSSv4-11.5.2 |
| 268 | ··-·high_complexity | 287 | ··-·high_complexity |
| 269 | ··-·high_severity | 288 | ··-·high_severity |
| 270 | ··-·medium_disruption | 289 | ··-·medium_disruption |
| 271 | ··-·no_reboot_needed | 290 | ··-·no_reboot_needed |
| 272 | ··-·restrict_strategy | 291 | ··-·restrict_strategy |
| 273 | ··-·rpm_verify_hashes | 292 | ··-·rpm_verify_hashes |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 276 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 277 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 278 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 279 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 280 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 281 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 282 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 283 | fi | ||
| 284 | else | ||
| 285 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 286 | fi | ||
| 287 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 293 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 288 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 294 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 289 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 295 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 290 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 296 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 291 | $·rpm·-qf·FILENAME | 297 | $·rpm·-qf·FILENAME |
| 292 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 298 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 314, 14 lines modified | Offset 314, 50 lines modified | ||
| 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 314 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 315 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 316 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 317 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 318 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 319 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 320 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 326 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 327 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 328 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 329 | declare·-A·SETPERMS_RPM_DICT | ||
| 330 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 331 | #·is·expected·by·the·RPM·database | ||
| 332 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 333 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 334 | do | ||
| 335 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 336 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 337 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 338 | ········do | ||
| 339 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 340 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 341 | ········done | ||
| 342 | done | ||
| 343 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 344 | #·correct·values | ||
| 345 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 346 | do | ||
| 347 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 348 | done | ||
| 349 | else | ||
| 350 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 351 | fi | ||
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 322 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 323 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 324 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 325 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 326 | -·name:·Gather·the·package·facts | 357 | -·name:·Gather·the·package·facts |
| 327 | ··package_facts: | 358 | ··package_facts: |
| Offset 433, 50 lines modified | Offset 469, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 469 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·high_complexity | 470 | ··-·high_complexity |
| 435 | ··-·high_severity | 471 | ··-·high_severity |
| 436 | ··-·medium_disruption | 472 | ··-·medium_disruption |
| 437 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 438 | ··-·restrict_strategy | 474 | ··-·restrict_strategy |
| 439 | ··-·rpm_verify_permissions | 475 | ··-·rpm_verify_permissions |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 768215/776297 bytes (98.96%) of diff not shown. | |||
| Offset 15067, 218 lines modified | Offset 15067, 218 lines modified | ||
| 0003ada0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ada0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003adb0:·6d36·3237·3922·2074·6162·696e·6465·783d··m6279"·tabindex= | 0003adb0:·6d36·3237·3922·2074·6162·696e·6465·783d··m6279"·tabindex= | ||
| 0003adc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003adc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003add0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003add0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ade0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ade0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003adf0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003adf0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003ae00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003ae00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003ae10:·6564·6961·7469·6f6e·204 | 0003ae10:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003ae20:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ae30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ae40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ae50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ae60:·3632·3739·223e·3c74·6162·6c65·2063·6c61··6279"><table·cla | |||
| 0003ae70:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ae80:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ae90:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003aea0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003aeb0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003aec0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003ae | 0003ae20:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003ae30:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ae40:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ae50:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ae60:·6522·2069·643d·2269·646d·3632·3739·223e··e"·id="idm6279"> | |||
| 0003ae70:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003ae80:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ae90:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003aea0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003aeb0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003aec0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003aed0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003aee0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003aef0:·6172·6765·743d·2223·6964·6d36·3238·3022··arget="#idm6280" | |||
| 0003af00:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003af10:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003af20:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003af30:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003af40:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003af50:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003af60:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003af70:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003af80:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003af90:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003afa0:·2220·6964·3d22·6964·6d36·3238·3022·3e3c··"·id="idm6280">< | |||
| 0003afb0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003afc0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003afd0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003afe0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003aff0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003 | 0003b000:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003 | 0003b010:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003af00:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003af10:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003 | 0003b020:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b030:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b040:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003 | 0003b050:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b060:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b070:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b080:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b090:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b0a0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003b0b0:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003b0c0:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003b0d0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003b0e0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003b0f0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003b100:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003af40:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003af50:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003af60:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003af70:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003af80:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003af90:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003afa0:·6f0a·2020·7461·6773·3a0a·2020·2d20·434a··o.··tags:.··-·CJ | |||
| 0003afb0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003afc0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003afd0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003afe0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003aff0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b000:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b010:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b020:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b030:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b040:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b050:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b060:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b070:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b080:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b090:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b0a0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b0b0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b0c0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b0d0:·6e3a·2028·226b·6572·6e65·6c22·2069·6e20··n:·("kernel"·in· | |||
| 0003b0e0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b0f0:·636b·6167·6573·206f·7220·226b·6572·6e65··ckages·or·"kerne | |||
| 0003b100:·6c2d·7565·6b22·2069·6e20·616e·7369·626c··l-uek"·in·ansibl | |||
| 0003b110:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b120:·290a·2020·7461·6773·3a0a·2020·2d20·434a··).··tags:.··-·CJ | |||
| 0003b130:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b140:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b150:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b160:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b170:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b180:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b190:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b1a0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b1b0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b1c0:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b1d0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b1e0:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b1f0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b110:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003b120:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003b130:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003b140:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003b150:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b | 0003b160:·3632·3831·2220·7461·6269·6e64·6578·3d22··6281"·tabindex=" | ||
| 0003b | 0003b170:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b | 0003b180:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b | 0003b190:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b | 0003b1a0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b | 0003b1b0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b2b0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003b2c0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b2d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b2e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| Max diff block lines reached; 31668678/31697410 bytes (99.91%) of diff not shown. | |||
| Offset 15085, 217 lines modified | Offset 15085, 217 lines modified | ||
| 0003aec0:·2d74·6172·6765·743d·2223·6964·6d36·3237··-target="#idm627 | 0003aec0:·2d74·6172·6765·743d·2223·6964·6d36·3237··-target="#idm627 | ||
| 0003aed0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003aed0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003aee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003aee0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003aef0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003aef0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af30:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003af40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af70:·7073·6522·2069·643d·2269·646d·3632·3739··pse"·id="idm6279 | |||
| 0003af80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003af90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003afa0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003afb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003afc0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003afd0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003afe0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003af | 0003af30:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003af40:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003af50:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af60:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af70:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003af80:·643d·2269·646d·3632·3739·223e·3c70·7265··d="idm6279"><pre | |||
| 0003af90:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003afa0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003afb0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003afc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003afd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003afe0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003aff0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b000:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b010:·743d·2223·6964·6d36·3238·3022·2074·6162··t="#idm6280"·tab | |||
| 0003b020:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b030:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b040:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b050:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b060:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b070:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b080:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b090:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b0a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b0b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b0c0:·3d22·6964·6d36·3238·3022·3e3c·7461·626c··="idm6280"><tabl | |||
| 0003b0d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b0e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b0f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b100:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b110:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b120:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b130:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b140:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b150:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b04 | 0003b160:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b170:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b180:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b190:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b1a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b1b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b1c0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b1d0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b1e0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b1f0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b200:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b210:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b220:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b060:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b070:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b080:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b090:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b0a0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b0b0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b0c0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0d0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b0e0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b0f0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b100:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b110:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b120:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b130:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b140:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b150:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b160:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b170:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b180:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b190:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b1a0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b1b0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b1c0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b1d0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b1e0:·7265·7365·6e74·0a20·2077·6865·6e3a·2028··resent.··when:·( | |||
| 0003b1f0:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b200:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b210:·6573·206f·7220·226b·6572·6e65·6c2d·7565··es·or·"kernel-ue | |||
| 0003b220:·6b22·2069·6e20·616e·7369·626c·655f·6661··k"·in·ansible_fa | |||
| 0003b230:·6374·732e·7061·636b·6167·6573·290a·2020··cts.packages).·· | |||
| 0003b240:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b250:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b260:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b270:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b280:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b290:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b2a0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b2b0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b2c0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b2d0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b2e0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b2f0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b300:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b310:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b | 0003b230:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003b | 0003b240:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003b | 0003b250:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003b | 0003b260:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003b | 0003b270:·7461·7267·6574·3d22·2369·646d·3632·3831··target="#idm6281 | ||
| 0003b | 0003b280:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b | 0003b290:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b | 0003b2a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b | 0003b2b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b | 0003b2c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b | 0003b2d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b3d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b3e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b3f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b400:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b410:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| Max diff block lines reached; 31608767/31637361 bytes (99.91%) of diff not shown. | |||
| Offset 15092, 133 lines modified | Offset 15092, 133 lines modified | ||
| 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | 0003af30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 0003af40:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003af40:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003af50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003af60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003af70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003af80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003af90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003afa0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003afb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003afc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003afd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003afe0:·6170·7365·2220·6964·3d22·6964·6d31·3038··apse"·id="idm108 | |||
| 0003aff0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b000:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b010:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b020:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b030:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b040:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b050:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003 | 0003afa0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003afb0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003afc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003afd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003afe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003aff0:·6964·3d22·6964·6d31·3038·3922·3e3c·7072··id="idm1089"><pr | |||
| 0003b000:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b010:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b020:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b030:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b040:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b050:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b060:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b070:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b080:·6574·3d22·2369·646d·3130·3930·2220·7461··et="#idm1090"·ta | |||
| 0003b090:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b0a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b0b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b0c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b0d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b0e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b0f0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b120:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b130:·643d·2269·646d·3130·3930·223e·3c74·6162··d="idm1090"><tab | |||
| 0003b140:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b150:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b160:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b170:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b180:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b190:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b1a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b1b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b1c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b1d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b1e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b1f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b200:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b210:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b220:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b230:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b240:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b250:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b260:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b270:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b280:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b290:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b090:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b0a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b0b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b0e0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b0f0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003b100:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003b110:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003b120:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003b130:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b140:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b150:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b160:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b170:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b180:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b190:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b1a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b1b0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b1c0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b1d0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b1e0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b1f0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b200:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b210:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b220:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b230:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b240:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b250:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b260:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003b270:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b280:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b290:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b2a0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b2b0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b2c0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b2d0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b2e0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b2f0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b300:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b310:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b320:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b330:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b340:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b350:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b360:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b370:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b380:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b390:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b3a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b3b0:·2223·6964·6d31·3039·3022·2074·6162·696e··"#idm1090"·tabin | |||
| 0003b3c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b3d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b3e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b3f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b400:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b410:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003b420:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b430:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b440:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| Max diff block lines reached; 2773296/2790298 bytes (99.39%) of diff not shown. | |||
| Offset 120, 14 lines modified | Offset 120, 31 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 133 | ··package_facts: | 148 | ··package_facts: |
| Offset 156, 31 lines modified | Offset 173, 14 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 175 | ··-·low_complexity |
| 159 | ··-·low_disruption | 176 | ··-·low_disruption |
| 160 | ··-·medium_severity | 177 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | include·install_aide | ||
| 173 | class·install_aide·{ | ||
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 181 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 180 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 182 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 181 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 183 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 182 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 184 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 183 | crontab: | 185 | crontab: |
| 184 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 186 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 393, 14 lines modified | Offset 393, 33 lines modified | ||
| 393 | ············_\x8i_\x8s_\x8m······1446 | 393 | ············_\x8i_\x8s_\x8m······1446 |
| 394 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 394 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 395 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 395 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 396 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 396 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 397 | ·····················FCS_TLSC_EXT.1 | 397 | ·····················FCS_TLSC_EXT.1 |
| 398 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 398 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 399 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 399 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 401 | var_system_crypto_policy='DEFAULT' | ||
| 402 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 403 | rc=$? | ||
| 404 | if·test·"$rc"·=·127;·then | ||
| 405 | » echo·"$stderr_of_call"·>&2 | ||
| 406 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 407 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 408 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 409 | » false··#·end·with·an·error·code | ||
| 410 | elif·test·"$rc"·!=·0;·then | ||
| 411 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 412 | » false··#·end·with·an·error·code | ||
| 413 | fi | ||
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 415 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 416 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 417 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 418 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 405 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 419 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 406 | ··set_fact: | 420 | ··set_fact: |
| Offset 445, 33 lines modified | Offset 464, 14 lines modified | ||
| 445 | ··-·PCI-DSSv4-2.2.7 | 464 | ··-·PCI-DSSv4-2.2.7 |
| 446 | ··-·configure_crypto_policy | 465 | ··-·configure_crypto_policy |
| 447 | ··-·high_severity | 466 | ··-·high_severity |
| 448 | ··-·low_complexity | 467 | ··-·low_complexity |
| 449 | ··-·low_disruption | 468 | ··-·low_disruption |
| 450 | ··-·no_reboot_needed | 469 | ··-·no_reboot_needed |
| 451 | ··-·restrict_strategy | 470 | ··-·restrict_strategy |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 453 | var_system_crypto_policy='DEFAULT' | ||
| 454 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 455 | rc=$? | ||
| 456 | if·test·"$rc"·=·127;·then | ||
| 457 | » echo·"$stderr_of_call"·>&2 | ||
| 458 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 459 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 460 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 461 | » false··#·end·with·an·error·code | ||
| 462 | elif·test·"$rc"·!=·0;·then | ||
| 463 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 464 | » false··#·end·with·an·error·code | ||
| 465 | fi | ||
| 466 | Group ·Updating·Software· Group·contains·1·rule | 471 | Group ·Updating·Software· Group·contains·1·rule |
| 467 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also | 472 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·dnf·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also |
| 468 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called | 473 | provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called |
| Max diff block lines reached; 313987/319170 bytes (98.38%) of diff not shown. | |||
| Offset 15087, 133 lines modified | Offset 15087, 133 lines modified | ||
| 0003aee0:·2d74·6172·6765·743d·2223·6964·6d31·3038··-target="#idm108 | 0003aee0:·2d74·6172·6765·743d·2223·6964·6d31·3038··-target="#idm108 | ||
| 0003aef0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003aef0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003af00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003af00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003af10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003af10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af50:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003af60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af90:·7073·6522·2069·643d·2269·646d·3130·3839··pse"·id="idm1089 | |||
| 0003afa0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003afb0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003afc0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003afd0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003afe0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003aff0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b000:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003 | 0003af50:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003af60:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003af70:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003af80:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003af90:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afa0:·643d·2269·646d·3130·3839·223e·3c70·7265··d="idm1089"><pre | |||
| 0003afb0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003afc0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003afd0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003afe0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003aff0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b000:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b010:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b020:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b030:·743d·2223·6964·6d31·3039·3022·2074·6162··t="#idm1090"·tab | |||
| 0003b040:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b050:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b060:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b070:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b080:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b090:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b0a0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b0b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b0c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b0d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b0e0:·3d22·6964·6d31·3039·3022·3e3c·7461·626c··="idm1090"><tabl | |||
| 0003b0f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b100:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b110:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b120:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b130:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b140:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b030:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b040:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b050:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b060:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b070:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b080:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b090:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b0a0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b0b0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b0c0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b0d0:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b0e0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0f0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b100:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b110:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b120:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b130:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b140:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b150:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b160:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b170:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b180:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b190:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b1a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b1b0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b1c0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b1d0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b1e0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b1f0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b200:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b210:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b220:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b230:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b240:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b250:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b260:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b270:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b280:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b290:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b2a0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b2b0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b2c0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b2d0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b2e0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b2f0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b300:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b310:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b320:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b330:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b340:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b350:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b360:·2369·646d·3130·3930·2220·7461·6269·6e64··#idm1090"·tabind | |||
| 0003b370:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b380:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b390:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b3a0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b3b0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b3c0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b3d0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b3e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b3f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b400:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b410:·6170·7365·2220·6964·3d22·6964·6d31·3039··apse"·id="idm109 | |||
| 0003b420:·3022·3e3c·7072·653e·3c63·6f64·653e·0a5b··0"><pre><code>.[ | |||
| 0003b430:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b440:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b450:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b460:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b470:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b480:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b490:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4a0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | |||
| 0003b4b0:·3931·2220·7461·6269·6e64·6578·3d22·3022··91"·tabindex="0" | |||
| 0003b4c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b4d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b4e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| Max diff block lines reached; 2715349/2732351 bytes (99.38%) of diff not shown. | |||
| Offset 118, 14 lines modified | Offset 118, 31 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Gather·the·package·facts | 145 | -·name:·Gather·the·package·facts |
| 131 | ··package_facts: | 146 | ··package_facts: |
| Offset 154, 31 lines modified | Offset 171, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 171 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 172 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 173 | ··-·low_complexity |
| 157 | ··-·low_disruption | 174 | ··-·low_disruption |
| 158 | ··-·medium_severity | 175 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 179 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 178 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 180 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 179 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 181 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 180 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 182 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 181 | crontab: | 183 | crontab: |
| 182 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 184 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 549, 14 lines modified | Offset 549, 20 lines modified | ||
| 549 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 549 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 550 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 550 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 551 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 551 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 552 | ···········standards,·and·guidance. | 552 | ···········standards,·and·guidance. |
| 553 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 553 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 554 | Severity: ·medium | 554 | Severity: ·medium |
| 555 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue | 555 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_issue |
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 561 | chgrp·0·/etc/issue | ||
| 556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 561 | -·name:·Test·for·existence·/etc/issue | 567 | -·name:·Test·for·existence·/etc/issue |
| 562 | ··stat: | 568 | ··stat: |
| Offset 578, 30 lines modified | Offset 584, 30 lines modified | ||
| 578 | ··tags: | 584 | ··tags: |
| 579 | ··-·configure_strategy | 585 | ··-·configure_strategy |
| 580 | ··-·file_groupowner_etc_issue | 586 | ··-·file_groupowner_etc_issue |
| 581 | ··-·low_complexity | 587 | ··-·low_complexity |
| 582 | ··-·low_disruption | 588 | ··-·low_disruption |
| 583 | ··-·medium_severity | 589 | ··-·medium_severity |
| 584 | ··-·no_reboot_needed | 590 | ··-·no_reboot_needed |
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 590 | chgrp·0·/etc/issue | ||
| 591 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 591 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·G\x8Gr\x8ro\x8ou\x8up\x8p·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·o\x8of\x8f·M\x8Me\x8es\x8ss\x8sa\x8ag\x8ge\x8e·o\x8of\x8f·t\x8th\x8he\x8e·D\x8Da\x8ay\x8y·B\x8Ba\x8an\x8nn\x8ne\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 592 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: | 592 | To·properly·set·the·group·owner·of·/etc/motd,·run·the·command: |
| 593 | $·sudo·chgrp·root·/etc/motd | 593 | $·sudo·chgrp·root·/etc/motd |
| 594 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the | 594 | ···········Display·of·a·standardized·and·approved·use·notification·before·granting·access·to·the |
| 595 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent | 595 | ···········operating·system·ensures·privacy·and·security·notification·verbiage·used·is·consistent |
| 596 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, | 596 | Rationale:·with·applicable·federal·laws,·Executive·Orders,·directives,·policies,·regulations, |
| 597 | ···········standards,·and·guidance. | 597 | ···········standards,·and·guidance. |
| 598 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. | 598 | ···········Proper·group·ownership·will·ensure·that·only·root·user·can·modify·the·banner. |
| 599 | Severity: ·medium | 599 | Severity: ·medium |
| 600 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd | 600 | Rule·ID:···xccdf_org.ssgproject.content_rule_file_groupowner_etc_motd |
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 606 | chgrp·0·/etc/motd | ||
| 601 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 602 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 603 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 604 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 605 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 606 | -·name:·Test·for·existence·/etc/motd | 612 | -·name:·Test·for·existence·/etc/motd |
| 607 | ··stat: | 613 | ··stat: |
| Offset 623, 30 lines modified | Offset 629, 30 lines modified | ||
| 623 | ··tags: | 629 | ··tags: |
| 624 | ··-·configure_strategy | 630 | ··-·configure_strategy |
| 625 | ··-·file_groupowner_etc_motd | 631 | ··-·file_groupowner_etc_motd |
| 626 | ··-·low_complexity | 632 | ··-·low_complexity |
| 627 | ··-·low_disruption | 633 | ··-·low_disruption |
| Max diff block lines reached; 306581/312045 bytes (98.25%) of diff not shown. | |||
| Offset 15112, 134 lines modified | Offset 15112, 134 lines modified | ||
| 0003b070:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b070:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b080:·2223·6964·6d31·3134·3922·2074·6162·696e··"#idm1149"·tabin | 0003b080:·2223·6964·6d31·3134·3922·2074·6162·696e··"#idm1149"·tabin | ||
| 0003b090:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b090:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b0a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b0a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b0b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b0b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b0c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b0c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b0d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b0d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b0e0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b0e0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b0f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b100:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b110:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b120:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b130:·2269·646d·3131·3439·223e·3c74·6162·6c65··"idm1149"><table | |||
| 0003b140:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b150:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b160:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b170:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b180:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b190:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b | 0003b0f0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b100:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b110:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b120:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b130:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 0003b140:·3439·223e·3c70·7265·3e3c·636f·6465·3e0a··49"><pre><code>. | |||
| 0003b150:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b160:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b170:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b180:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b190:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b1a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b1b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b1c0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003b1d0:·3135·3022·2074·6162·696e·6465·783d·2230··150"·tabindex="0 | |||
| 0003b1e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b1f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b200:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b210:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b220:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b230:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b240:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b250:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b260:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b270:·6170·7365·2220·6964·3d22·6964·6d31·3135··apse"·id="idm115 | |||
| 0003b280:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b290:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b2a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b2b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b2c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b2e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b1d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003b2f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b300:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b | 0003b310:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003b320:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003b330:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b340:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b350:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b360:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b370:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b380:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 0003b390:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 0003b210:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b220:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b230:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b240:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b250:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b260:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b270:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b280:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b290:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2a0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2b0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2c0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2d0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2e0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b2f0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b300:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b310:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b320:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b330:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b340:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b350:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b360:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b3 | 0003b3a0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | ||
| 0003b3b0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 0003b3c0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 0003b3d0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 0003b380:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b390:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b3a0:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b3b0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b3c0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b3d0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b3e0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b3f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b400:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b410:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b420:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b430:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b440:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b450:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b460:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b470:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b480:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b490:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b4a0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b4b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b4c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b4d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b4e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b4f0:·7461·7267·6574·3d22·2369·646d·3131·3530··target="#idm1150 | |||
| 0003b500:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b510:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b520:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b530:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b540:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b550:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b560:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b570:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b580:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b590:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b5a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b5b0:·3d22·6964·6d31·3135·3022·3e3c·7072·653e··="idm1150"><pre> | |||
| 0003b5c0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| Max diff block lines reached; 3473343/3490483 bytes (99.51%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 31 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 149 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 150 | ··package_facts: |
| Offset 158, 31 lines modified | Offset 175, 14 lines modified | ||
| 158 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 159 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 160 | ··-·low_complexity | 177 | ··-·low_complexity |
| 161 | ··-·low_disruption | 178 | ··-·low_disruption |
| 162 | ··-·medium_severity | 179 | ··-·medium_severity |
| 163 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 164 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of |
| 185 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance | 187 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance |
| 186 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 353, 14 lines modified | Offset 353, 33 lines modified | ||
| 353 | ············_\x8i_\x8s_\x8m······1446 | 353 | ············_\x8i_\x8s_\x8m······1446 |
| 354 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 354 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 355 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 355 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, | 356 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2, |
| 357 | ·····················FCS_TLSC_EXT.1 | 357 | ·····················FCS_TLSC_EXT.1 |
| 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 358 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 359 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 361 | var_system_crypto_policy='DEFAULT' | ||
| 362 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 363 | rc=$? | ||
| 364 | if·test·"$rc"·=·127;·then | ||
| 365 | » echo·"$stderr_of_call"·>&2 | ||
| 366 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 367 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 368 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 369 | » false··#·end·with·an·error·code | ||
| 370 | elif·test·"$rc"·!=·0;·then | ||
| 371 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 372 | » false··#·end·with·an·error·code | ||
| 373 | fi | ||
| 360 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 361 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 362 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 363 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 364 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 365 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 379 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 366 | ··set_fact: | 380 | ··set_fact: |
| Offset 405, 33 lines modified | Offset 424, 14 lines modified | ||
| 405 | ··-·PCI-DSSv4-2.2.7 | 424 | ··-·PCI-DSSv4-2.2.7 |
| 406 | ··-·configure_crypto_policy | 425 | ··-·configure_crypto_policy |
| 407 | ··-·high_severity | 426 | ··-·high_severity |
| 408 | ··-·low_complexity | 427 | ··-·low_complexity |
| 409 | ··-·low_disruption | 428 | ··-·low_disruption |
| 410 | ··-·no_reboot_needed | 429 | ··-·no_reboot_needed |
| 411 | ··-·restrict_strategy | 430 | ··-·restrict_strategy |
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 413 | var_system_crypto_policy='DEFAULT' | ||
| 414 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 415 | rc=$? | ||
| 416 | if·test·"$rc"·=·127;·then | ||
| 417 | » echo·"$stderr_of_call"·>&2 | ||
| 418 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 419 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 420 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 421 | » false··#·end·with·an·error·code | ||
| 422 | elif·test·"$rc"·!=·0;·then | ||
| 423 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 424 | » false··#·end·with·an·error·code | ||
| 425 | fi | ||
| 426 | Group ·Sudo· Group·contains·1·rule | 431 | Group ·Sudo· Group·contains·1·rule |
| 427 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain | 432 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Sudo,·which·stands·for·"su·'do'",·provides·the·ability·to·delegate·authority·to·certain |
| 428 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, | 433 | users,·groups·of·users,·or·system·administrators.·When·configured·for·system·users·and/or·groups, |
| Max diff block lines reached; 403938/409193 bytes (98.72%) of diff not shown. | |||
| Offset 14931, 117 lines modified | Offset 14931, 117 lines modified | ||
| 0003a520:·6574·3d22·2369·646d·3636·3234·2220·7461··et="#idm6624"·ta | 0003a520:·6574·3d22·2369·646d·3636·3234·2220·7461··et="#idm6624"·ta | ||
| 0003a530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003a530:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003a540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003a540:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003a550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003a550:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003a560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003a560:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003a570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003a570:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003a580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003a580:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003a590:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003a5a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003a5 | 0003a590:·5368·656c·6c20·7363·7269·7074·20e2·87b2··Shell·script·... | ||
| 0003a5a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003a5b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003a5c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003a5d0:·2269·646d·3636·3234·223e·3c74·6162·6c65··"idm6624"><table | |||
| 0003a5e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003a5f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003a600:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003a610:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003a620:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003a630:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003a640:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a650:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003a660:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a670:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003a680:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003a690:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003a6a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e63··ategy:</th><td>c | |||
| 0003a6b0:·6f6e·6669·6775·7265·3c2f·7464·3e3c·2f74··onfigure</td></t | |||
| 0003a6c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a6d0:·636f·6465·3e63·6867·7270·2030·202f·6574··code>chgrp·0·/et | |||
| 0003a6e0:·632f·7061·7373·7764·0a3c·2f63·6f64·653e··c/passwd.</code> | |||
| 0003a6f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a700:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a710:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a | 0003a720:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003a730:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003a740:·3632·3522·2074·6162·696e·6465·783d·2230··625"·tabindex="0 | |||
| 0003a750:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a760:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a770:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a780:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a790:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a7a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a7b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a7c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a7d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a7e0:·6c61·7073·6522·2069·643d·2269·646d·3636··lapse"·id="idm66 | |||
| 0003a7f0:·3235·223e·3c74·6162·6c65·2063·6c61·7373··25"><table·class | |||
| 0003a800:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a810:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003a820:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003a830:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a840:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a5d0:·6964·3d22·6964·6d36·3632·3422·3e3c·7461··id="idm6624"><ta | |||
| 0003a5e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a5f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a600:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a610:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a620:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a630:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a640:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a650:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a660:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a670:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a680:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a6a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a6b0:·643e·636f·6e66·6967·7572·653c·2f74·643e··d>configure</td> | |||
| 0003a6c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a6d0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003a6e0:·5465·7374·2066·6f72·2065·7869·7374·656e··Test·for·existen | |||
| 0003a6f0:·6365·202f·6574·632f·7061·7373·7764·0a20··ce·/etc/passwd.· | |||
| 0003a700:·2073·7461·743a·0a20·2020·2070·6174·683a···stat:.····path: | |||
| 0003a710:·202f·6574·632f·7061·7373·7764·0a20·2072···/etc/passwd.··r | |||
| 0003a720:·6567·6973·7465·723a·2066·696c·655f·6578··egister:·file_ex | |||
| 0003a730:·6973·7473·0a20·2074·6167·733a·0a20·202d··ists.··tags:.··- | |||
| 0003a740:·2043·4a49·532d·352e·352e·322e·320a·2020···CJIS-5.5.2.2.·· | |||
| 0003a750:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 0003a760:·2d36·2831·290a·2020·2d20·4e49·5354·2d38··-6(1).··-·NIST-8 | |||
| 0003a770:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003a780:·2d20·5043·492d·4453·532d·5265·712d·382e··-·PCI-DSS-Req-8. | |||
| 0003a790:·372e·630a·2020·2d20·5043·492d·4453·5376··7.c.··-·PCI-DSSv | |||
| 0003a7a0:·342d·322e·320a·2020·2d20·5043·492d·4453··4-2.2.··-·PCI-DS | |||
| 0003a7b0:·5376·342d·322e·322e·360a·2020·2d20·636f··Sv4-2.2.6.··-·co | |||
| 0003a7c0:·6e66·6967·7572·655f·7374·7261·7465·6779··nfigure_strategy | |||
| 0003a7d0:·0a20·202d·2066·696c·655f·6772·6f75·706f··.··-·file_groupo | |||
| 0003a7e0:·776e·6572·5f65·7463·5f70·6173·7377·640a··wner_etc_passwd. | |||
| 0003a7f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003a800:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003a810:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003a820:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003a830:·5f72·6562·6f6f·745f·6e65·6564·6564·0a0a··_reboot_needed.. | |||
| 0003a840:·2d20·6e61·6d65·3a20·456e·7375·7265·2067··-·name:·Ensure·g | |||
| 0003a850:·726f·7570·206f·776e·6572·2030·206f·6e20··roup·owner·0·on· | |||
| 0003a860:·2f65·7463·2f70·6173·7377·640a·2020·6669··/etc/passwd.··fi | |||
| 0003a870:·6c65·3a0a·2020·2020·7061·7468·3a20·2f65··le:.····path:·/e | |||
| 0003a880:·7463·2f70·6173·7377·640a·2020·2020·6772··tc/passwd.····gr | |||
| 0003a890:·6f75·703a·2027·3027·0a20·2077·6865·6e3a··oup:·'0'.··when: | |||
| 0003a8a0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003a8b0:·7420·6973·2064·6566·696e·6564·2061·6e64··t·is·defined·and | |||
| 0003a8c0:·2066·696c·655f·6578·6973·7473·2e73·7461···file_exists.sta | |||
| 0003a8d0:·742e·6578·6973·7473·0a20·2074·6167·733a··t.exists.··tags: | |||
| 0003a8e0:·0a20·202d·2043·4a49·532d·352e·352e·322e··.··-·CJIS-5.5.2. | |||
| 0003a8f0:·320a·2020·2d20·4e49·5354·2d38·3030·2d35··2.··-·NIST-800-5 | |||
| 0003a900:·332d·4143·2d36·2831·290a·2020·2d20·4e49··3-AC-6(1).··-·NI | |||
| 0003a910:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003a920:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003a930:·712d·382e·372e·630a·2020·2d20·5043·492d··q-8.7.c.··-·PCI- | |||
| 0003a940:·4453·5376·342d·322e·320a·2020·2d20·5043··DSSv4-2.2.··-·PC | |||
| 0003a950:·492d·4453·5376·342d·322e·322e·360a·2020··I-DSSv4-2.2.6.·· | |||
| 0003a960:·2d20·636f·6e66·6967·7572·655f·7374·7261··-·configure_stra | |||
| 0003a970:·7465·6779·0a20·202d·2066·696c·655f·6772··tegy.··-·file_gr | |||
| 0003a980:·6f75·706f·776e·6572·5f65·7463·5f70·6173··oupowner_etc_pas | |||
| 0003a990:·7377·640a·2020·2d20·6c6f·775f·636f·6d70··swd.··-·low_comp | |||
| 0003a9a0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a9b0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a9c0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a9d0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a9e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003a9f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003aa00:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aa10:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003aa20:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003aa30:·6765·743d·2223·6964·6d36·3632·3522·2074··get="#idm6625"·t | |||
| 0003aa40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003aa50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003aa60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| Max diff block lines reached; 31106/45900 bytes (67.77%) of diff not shown. | |||
| Offset 107, 14 lines modified | Offset 107, 20 lines modified | ||
| 107 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 107 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 108 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 109 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 110 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 119 | chgrp·0·/etc/passwd | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 119 | -·name:·Test·for·existence·/etc/passwd | 125 | -·name:·Test·for·existence·/etc/passwd |
| 120 | ··stat: | 126 | ··stat: |
| Offset 148, 20 lines modified | Offset 154, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-2.2.6 | 154 | ··-·PCI-DSSv4-2.2.6 |
| 149 | ··-·configure_strategy | 155 | ··-·configure_strategy |
| 150 | ··-·file_groupowner_etc_passwd | 156 | ··-·file_groupowner_etc_passwd |
| 151 | ··-·low_complexity | 157 | ··-·low_complexity |
| 152 | ··-·low_disruption | 158 | ··-·low_disruption |
| 153 | ··-·medium_severity | 159 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 160 | ··-·no_reboot_needed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 160 | chgrp·0·/etc/passwd | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 162 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 163 | $·sudo·chown·root·/etc/passwd | 163 | $·sudo·chown·root·/etc/passwd |
| 164 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are | 164 | ············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 165 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for | 165 | Rationale:··configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 166 | ············system·security. | 166 | ············system·security. |
| 167 | Severity: ··medium | 167 | Severity: ··medium |
| Offset 182, 14 lines modified | Offset 182, 20 lines modified | ||
| 182 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 182 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 183 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 183 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 184 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 184 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 185 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 186 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 186 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 187 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 187 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 188 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 188 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 194 | chown·0·/etc/passwd | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 194 | -·name:·Test·for·existence·/etc/passwd | 200 | -·name:·Test·for·existence·/etc/passwd |
| 195 | ··stat: | 201 | ··stat: |
| Offset 223, 20 lines modified | Offset 229, 14 lines modified | ||
| 223 | ··-·PCI-DSSv4-2.2.6 | 229 | ··-·PCI-DSSv4-2.2.6 |
| 224 | ··-·configure_strategy | 230 | ··-·configure_strategy |
| 225 | ··-·file_owner_etc_passwd | 231 | ··-·file_owner_etc_passwd |
| 226 | ··-·low_complexity | 232 | ··-·low_complexity |
| 227 | ··-·low_disruption | 233 | ··-·low_disruption |
| 228 | ··-·medium_severity | 234 | ··-·medium_severity |
| 229 | ··-·no_reboot_needed | 235 | ··-·no_reboot_needed |
| 230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 235 | chown·0·/etc/passwd | ||
| 236 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 236 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 237 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 237 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 238 | $·sudo·chmod·0644·/etc/passwd | 238 | $·sudo·chmod·0644·/etc/passwd |
| 239 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 239 | ············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 240 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list | 240 | Rationale:··the·risk·of·its·compromise·is·increased.·The·file·contains·the·list |
| 241 | ············of·accounts·on·the·system·and·associated·information,·and | 241 | ············of·accounts·on·the·system·and·associated·information,·and |
| 242 | ············protection·of·this·file·is·critical·for·system·security. | 242 | ············protection·of·this·file·is·critical·for·system·security. |
| Offset 258, 14 lines modified | Offset 258, 24 lines modified | ||
| 258 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 | 258 | ···························007-3·R5.1,·CIP-007-3·R5.1.1,·CIP-007-3·R5.1.2 |
| 259 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 259 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 260 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 260 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 261 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 261 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 262 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 262 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 263 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 264 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 268 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 269 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 270 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 265 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 266 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 267 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 268 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 269 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 270 | -·name:·Test·for·existence·/etc/passwd | 276 | -·name:·Test·for·existence·/etc/passwd |
| 271 | ··stat: | 277 | ··stat: |
| Offset 299, 21 lines modified | Offset 309, 11 lines modified | ||
| 299 | ··-·PCI-DSSv4-2.2.6 | 309 | ··-·PCI-DSSv4-2.2.6 |
| 300 | ··-·configure_strategy | 310 | ··-·configure_strategy |
| 301 | ··-·file_permissions_etc_passwd | 311 | ··-·file_permissions_etc_passwd |
| 302 | ··-·low_complexity | 312 | ··-·low_complexity |
| 303 | ··-·low_disruption | 313 | ··-·low_disruption |
| 304 | ··-·medium_severity | 314 | ··-·medium_severity |
| 305 | ··-·no_reboot_needed | 315 | ··-·no_reboot_needed |
| 306 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 307 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 308 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 309 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 310 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 311 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 312 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 316 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| Max diff block lines reached; 126/5541 bytes (2.27%) of diff not shown. | |||
| Offset 19069, 66 lines modified | Offset 19069, 66 lines modified | ||
| 0004a7c0:·7461·7267·6574·3d22·2369·646d·3736·3334··target="#idm7634 | 0004a7c0:·7461·7267·6574·3d22·2369·646d·3736·3334··target="#idm7634 | ||
| 0004a7d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004a7d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a7e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004a7e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a7f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004a7f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a800:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004a800:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a810:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004a810:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a820:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004a820:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a830:·696f·6e20· | 0004a830:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | ||
| 0004a840:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a8 | 0004a850:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a8 | 0004a860:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a8 | 0004a870:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0004a8 | 0004a880:·3334·223e·3c74·6162·6c65·2063·6c61·7373··34"><table·class | ||
| 0004a8 | 0004a890:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a8 | 0004a8a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a8 | 0004a8b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0004a8 | 0004a8c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0004a8 | 0004a8d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0004a8d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004a8e0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a8f0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a | 0004a8e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0004a8f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a900:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a910:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0004a9 | 0004a920:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0004a9 | 0004a930:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | ||
| 0004a9 | 0004a940:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0004a9 | 0004a950:·793a·3c2f·7468·3e3c·7464·3e64·6973·6162··y:</th><td>disab | ||
| 0004a9 | 0004a960:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0004a9 | 0004a970:·626c·653e·3c70·7265·3e3c·636f·6465·3e61··ble><pre><code>a | ||
| 0004a9 | 0004a980:·7069·5665·7273·696f·6e3a·206d·6163·6869··piVersion:·machi | ||
| 0004a9 | 0004a990:·6e65·636f·6e66·6967·7572·6174·696f·6e2e··neconfiguration. | ||
| 0004a9 | 0004a9a0:·6f70·656e·7368·6966·742e·696f·2f76·310a··openshift.io/v1. | ||
| 0004a9 | 0004a9b0:·6b69·6e64·3a20·4d61·6368·696e·6543·6f6e··kind:·MachineCon | ||
| 0004a9 | 0004a9c0:·6669·670a·7370·6563·3a0a·2020·636f·6e66··fig.spec:.··conf | ||
| 0004a9 | 0004a9d0:·6967·3a0a·2020·2020·6967·6e69·7469·6f6e··ig:.····ignition | ||
| 0004a9 | 0004a9e0:·3a0a·2020·2020·2020·7665·7273·696f·6e3a··:.······version: | ||
| 0004a9 | 0004a9f0:·2033·2e31·2e30·0a20·2020·2073·7973·7465···3.1.0.····syste | ||
| 0004a | 0004aa00:·6d64·3a0a·2020·2020·2020·756e·6974·733a··md:.······units: | ||
| 0004aa00:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | |||
| 0004aa10:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | |||
| 0004aa20:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004aa30:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004aa40:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004aa | 0004aa10:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | ||
| 0004aa | 0004aa20:·6562·7567·2d73·6865·6c6c·2e73·6572·7669··ebug-shell.servi | ||
| 0004aa30:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004aa40:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004aa50:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004aa60:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | |||
| 0004aa70:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | |||
| 0004aa | 0004aa80:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0004aa | 0004aa90:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0004aa | 0004aaa0:·6b3a·2074·7275·650a·3c2f·636f·6465·3e3c··k:·true.</code>< | ||
| 0004aa | 0004aab0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0004aa | 0004aac0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0004aa | 0004aad0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0004aa | 0004aae0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0004aa | 0004aaf0:·612d·7461·7267·6574·3d22·2369·646d·3736··a-target="#idm76 | ||
| 0004a | 0004ab00:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | ||
| 0004ab | 0004ab10:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004ab | 0004ab20:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004ab | 0004ab30:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004ab | 0004ab40:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004ab | 0004ab50:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004ab60:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0004ab50:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 0004ab60:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004ab70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0004ab70:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004ab80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0004ab80:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004ab90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0004ab90:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004aba0:·2269·646d·3736·3335·223e·3c74·6162·6c65··"idm7635"><table | 0004aba0:·2269·646d·3736·3335·223e·3c74·6162·6c65··"idm7635"><table | ||
| 0004abb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | 0004abb0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004abc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | 0004abc0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004abd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | 0004abd0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00087ad0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00087ae0:·6d31·3833·3933·2220·7461·6269·6e64·6578··m18393"·tabindex | 00087ae0:·6d31·3833·3933·2220·7461·6269·6e64·6578··m18393"·tabindex | ||
| 00087af0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00087af0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00087b00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00087b00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00087b10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00087b10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00087b20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00087b20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00087b30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00087b30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00087b40:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | |||
| 00087b50:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 00087b60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00087b70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00087b80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00087b90:·2269·646d·3138·3339·3322·3e3c·7461·626c··"idm18393"><tabl | |||
| 00087ba0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00087bb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00087bc0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00087bd0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00087be0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00087bf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00087c00:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00087c10:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00087c20:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 00087c30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00087c40:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 00087c50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00087c60:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00087c70:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 00087c80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00087c90:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | |||
| 00087ca0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | |||
| 00087cb0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | |||
| 00087cc0:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | |||
| 00087cd0:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | |||
| 00087ce0:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | |||
| 00087cf0:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | |||
| 00087d00:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | |||
| 00087d10:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | |||
| 00087d20:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | |||
| 00087d30:·6e61·6d65·3a20·626c·7565·746f·6f74·682e··name:·bluetooth. | |||
| 00087d40:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 00087d50:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 00087d60:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 00087d70:·650a·2020·2020·2020·2d20·6e61·6d65·3a20··e.······-·name:· | |||
| 00087d80:·626c·7565·746f·6f74·682e·736f·636b·6574··bluetooth.socket | |||
| 00087d90:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 00087da0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 00087db0:·6d61·736b·3a20·7472·7565·0a3c·2f63·6f64··mask:·true.</cod | |||
| 00087dc0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00087dd0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00087de0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| Max diff block lines reached; 16750/32672 bytes (51.27%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 3587, 15 lines modified | Offset 3587, 15 lines modified | ||
| 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3589 | Severity: ···high | 3589 | Severity: ···high |
| 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3591 | Identifiers:·CCE-86189-8 | 3591 | Identifiers:·CCE-86189-8 |
| 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3599 | apiVersion:·machineconfiguration.openshift.io/v1 | 3599 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3600 | kind:·MachineConfig | 3600 | kind:·MachineConfig |
| 3601 | spec: | 3601 | spec: |
| Offset 3606, 15 lines modified | Offset 3606, 15 lines modified | ||
| 3606 | ······units: | 3606 | ······units: |
| 3607 | ······-·name:·sshd.service | 3607 | ······-·name:·sshd.service |
| 3608 | ········enabled:·false | 3608 | ········enabled:·false |
| 3609 | ········mask:·true | 3609 | ········mask:·true |
| 3610 | ······-·name:·sshd.socket | 3610 | ······-·name:·sshd.socket |
| 3611 | ········enabled:·false | 3611 | ········enabled:·false |
| 3612 | ········mask:·true | 3612 | ········mask:·true |
| 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3618 | apiVersion:·machineconfiguration.openshift.io/v1 | 3618 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3619 | kind:·MachineConfig | 3619 | kind:·MachineConfig |
| 3620 | spec: | 3620 | spec: |
| Max diff block lines reached; -1/7394 bytes (-0.01%) of diff not shown. | |||
| Offset 19068, 67 lines modified | Offset 19068, 67 lines modified | ||
| 0004a7b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004a7b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004a7c0:·3d22·2369·646d·3736·3334·2220·7461·6269··="#idm7634"·tabi | 0004a7c0:·3d22·2369·646d·3736·3334·2220·7461·6269··="#idm7634"·tabi | ||
| 0004a7d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0004a7d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004a7e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0004a7e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004a7f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0004a7f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004a800:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0004a800:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004a810:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0004a810:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004a820:·223e·5265·6d65·6469·6174·696f·6e20· | 0004a820:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 0004a830:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004a8 | 0004a840:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004a8 | 0004a850:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004a8 | 0004a860:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004a8 | 0004a870:·2069·643d·2269·646d·3736·3334·223e·3c74···id="idm7634"><t | ||
| 0004a8 | 0004a880:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004a8 | 0004a890:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004a8 | 0004a8a0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0004a8 | 0004a8b0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0004a8 | 0004a8c0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0004a8 | 0004a8d0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0004a8d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004a8e0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a8f0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a | 0004a8e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a8f0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a900:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a910:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a9 | 0004a920:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | ||
| 0004a9 | 0004a930:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0004a9 | 0004a940:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0004a9 | 0004a950:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | ||
| 0004a9 | 0004a960:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0004a9 | 0004a970:·7265·3e3c·636f·6465·3e61·7069·5665·7273··re><code>apiVers | ||
| 0004a9 | 0004a980:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | ||
| 0004a9 | 0004a990:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | ||
| 0004a9 | 0004a9a0:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | ||
| 0004a9 | 0004a9b0:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | ||
| 0004a9 | 0004a9c0:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | ||
| 0004a9 | 0004a9d0:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | ||
| 0004a9 | 0004a9e0:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | ||
| 0004a9 | 0004a9f0:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | ||
| 0004a | 0004aa00:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | ||
| 0004aa00:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | |||
| 0004aa10:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004aa20:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004aa30:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004aa40:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004aa | 0004aa10:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | ||
| 0004aa | 0004aa20:·6865·6c6c·2e73·6572·7669·6365·0a20·2020··hell.service.··· | ||
| 0004aa | 0004aa30:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | ||
| 0004aa | 0004aa40:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | ||
| 0004aa50:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004aa60:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | |||
| 0004aa70:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 0004aa80:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 0004aa90:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 0004aa | 0004aaa0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | ||
| 0004aa | 0004aab0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0004aa | 0004aac0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0004aa | 0004aad0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0004aa | 0004aae0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0004aa | 0004aaf0:·6574·3d22·2369·646d·3736·3335·2220·7461··et="#idm7635"·ta | ||
| 0004a | 0004ab00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004ab | 0004ab10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004ab | 0004ab20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004ab | 0004ab30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004ab | 0004ab40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004ab | 0004ab50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004ab50:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004ab60:· | 0004ab60:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0004ab70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 0004ab70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004ab80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 0004ab80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004ab90:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | 0004ab90:·6c61·7073·6522·2069·643d·2269·646d·3736··lapse"·id="idm76 | ||
| 0004aba0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | 0004aba0:·3335·223e·3c74·6162·6c65·2063·6c61·7373··35"><table·class | ||
| 0004abb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0004abb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004abc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0004abc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004abd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0004abd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6172·6765·743d·2223·6964·6d31·3833·3933··arget="#idm18393 | 00087ad0:·6172·6765·743d·2223·6964·6d31·3833·3933··arget="#idm18393 | ||
| 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00087b40:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00087b50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00087b60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00087b70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00087b80:·6c61·7073·6522·2069·643d·2269·646d·3138··lapse"·id="idm18 | |||
| 00087b90:·3339·3322·3e3c·7461·626c·6520·636c·6173··393"><table·clas | |||
| 00087ba0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00087bb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00087bc0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00087bd0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00087be0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00087bf0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00087c00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00087c10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | |||
| 00087c20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 00087c30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00087c40:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00087c50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00087c60:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 00087c70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00087c80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00087c90:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00087ca0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00087cb0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00087cc0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00087cd0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00087ce0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| 00087cf0:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | |||
| 00087d00:·3a20·332e·312e·300a·2020·2020·7379·7374··:·3.1.0.····syst | |||
| 00087d10:·656d·643a·0a20·2020·2020·2075·6e69·7473··emd:.······units | |||
| 00087d20:·3a0a·2020·2020·2020·2d20·6e61·6d65·3a20··:.······-·name:· | |||
| 00087d30:·626c·7565·746f·6f74·682e·7365·7276·6963··bluetooth.servic | |||
| 00087d40:·650a·2020·2020·2020·2020·656e·6162·6c65··e.········enable | |||
| 00087d50:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 00087d60:·206d·6173·6b3a·2074·7275·650a·2020·2020···mask:·true.···· | |||
| 00087d70:·2020·2d20·6e61·6d65·3a20·626c·7565·746f····-·name:·blueto | |||
| 00087d80:·6f74·682e·736f·636b·6574·0a20·2020·2020··oth.socket.····· | |||
| 00087d90:·2020·2065·6e61·626c·6564·3a20·6661·6c73·····enabled:·fals | |||
| 00087da0:·650a·2020·2020·2020·2020·6d61·736b·3a20··e.········mask:· | |||
| 00087db0:·7472·7565·0a3c·2f63·6f64·653e·3c2f·7072··true.</code></pr | |||
| 00087dc0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00087dd0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00087de0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| Max diff block lines reached; 16612/32672 bytes (50.84%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 3587, 15 lines modified | Offset 3587, 15 lines modified | ||
| 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3587 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3588 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3589 | Severity: ···high | 3589 | Severity: ···high |
| 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3590 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3591 | Identifiers:·CCE-86189-8 | 3591 | Identifiers:·CCE-86189-8 |
| 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3592 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3593 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 3594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3599 | apiVersion:·machineconfiguration.openshift.io/v1 | 3599 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3600 | kind:·MachineConfig | 3600 | kind:·MachineConfig |
| 3601 | spec: | 3601 | spec: |
| Offset 3606, 15 lines modified | Offset 3606, 15 lines modified | ||
| 3606 | ······units: | 3606 | ······units: |
| 3607 | ······-·name:·sshd.service | 3607 | ······-·name:·sshd.service |
| 3608 | ········enabled:·false | 3608 | ········enabled:·false |
| 3609 | ········mask:·true | 3609 | ········mask:·true |
| 3610 | ······-·name:·sshd.socket | 3610 | ······-·name:·sshd.socket |
| 3611 | ········enabled:·false | 3611 | ········enabled:·false |
| 3612 | ········mask:·true | 3612 | ········mask:·true |
| 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3613 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3614 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3615 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3616 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3617 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3618 | apiVersion:·machineconfiguration.openshift.io/v1 | 3618 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3619 | kind:·MachineConfig | 3619 | kind:·MachineConfig |
| 3620 | spec: | 3620 | spec: |
| Max diff block lines reached; -1/7394 bytes (-0.01%) of diff not shown. | |||
| Offset 19070, 66 lines modified | Offset 19070, 66 lines modified | ||
| 0004a7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0004a7d0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0004a7e0:·3736·3334·2220·7461·6269·6e64·6578·3d22··7634"·tabindex=" | 0004a7e0:·3736·3334·2220·7461·6269·6e64·6578·3d22··7634"·tabindex=" | ||
| 0004a7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0004a7f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0004a800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0004a800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0004a810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0004a810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0004a820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0004a820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0004a830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0004a830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0004a840:·6469·6174·696f·6e20· | 0004a840:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | ||
| 0004a850:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0004a8 | 0004a860:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004a8 | 0004a870:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004a8 | 0004a880:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004a8 | 0004a890:·646d·3736·3334·223e·3c74·6162·6c65·2063··dm7634"><table·c | ||
| 0004a8 | 0004a8a0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004a8 | 0004a8b0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004a8 | 0004a8c0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004a8 | 0004a8d0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004a8 | 0004a8e0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004a8 | 0004a8f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0004a900:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a910:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a920:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | |||
| 0004a930:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0004a940:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | |||
| 0004a | 0004a950:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0004a900:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004a910:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0004a920:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004a930:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0004a940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a9 | 0004a960:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | ||
| 0004a9 | 0004a970:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | ||
| 0004a9 | 0004a980:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0004a9 | 0004a990:·6465·3e61·7069·5665·7273·696f·6e3a·206d··de>apiVersion:·m | ||
| 0004a9 | 0004a9a0:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | ||
| 0004a9 | 0004a9b0:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | ||
| 0004a9 | 0004a9c0:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | ||
| 0004a9 | 0004a9d0:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | ||
| 0004a9 | 0004a9e0:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | ||
| 0004a9 | 0004a9f0:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | ||
| 0004a | 0004aa00:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | ||
| 0004aa | 0004aa10:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | ||
| 0004aa10:·2020·756e·6974·733a·0a20·2020·2020·202d····units:.······- | |||
| 0004aa20:·206e·616d·653a·2064·6562·7567·2d73·6865···name:·debug-she | |||
| 0004aa30:·6c6c·2e73·6572·7669·6365·0a20·2020·2020··ll.service.····· | |||
| 0004aa40:·2020·2065·6e61·626c·6564·3a20·6661·6c73·····enabled:·fals | |||
| 0004aa50:·650a·2020·2020·2020·2020·6d61·736b·3a20··e.········mask:· | |||
| 0004aa | 0004aa20:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | ||
| 0004aa | 0004aa30:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | ||
| 0004aa | 0004aa40:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | ||
| 0004aa | 0004aa50:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | ||
| 0004aa | 0004aa60:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | ||
| 0004aa70:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | |||
| 0004aa80:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | |||
| 0004aa90:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | |||
| 0004aaa0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0004aab0:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | |||
| 0004aa | 0004aac0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0004aa | 0004aad0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0004aa | 0004aae0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0004aa | 0004aaf0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0004a | 0004ab00:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004ab | 0004ab10:·646d·3736·3335·2220·7461·6269·6e64·6578··dm7635"·tabindex | ||
| 0004ab | 0004ab20:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004ab | 0004ab30:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004ab | 0004ab40:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004ab | 0004ab50:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004ab | 0004ab60:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004ab70:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0004ab60:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 0004ab70:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004ab80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | 0004ab80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004ab90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0004ab90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004aba0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0004aba0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004abb0:·2069·643d·2269·646d·3736·3335·223e·3c74···id="idm7635"><t | 0004abb0:·2069·643d·2269·646d·3736·3335·223e·3c74···id="idm7635"><t | ||
| 0004abc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | 0004abc0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004abd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | 0004abd0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004abe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | 0004abe0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| Offset 34735, 67 lines modified | Offset 34735, 67 lines modified | ||
| 00087ae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00087ae0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00087af0:·2223·6964·6d31·3833·3933·2220·7461·6269··"#idm18393"·tabi | 00087af0:·2223·6964·6d31·3833·3933·2220·7461·6269··"#idm18393"·tabi | ||
| 00087b00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00087b00:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00087b10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00087b10:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00087b20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00087b20:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00087b30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00087b30:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00087b40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00087b40:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00087b50:·223e·5265·6d65·6469·6174·696f·6e20· | 00087b50:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 00087b60:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00087b | 00087b70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 00087b | 00087b80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 00087b | 00087b90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 00087b | 00087ba0:·2069·643d·2269·646d·3138·3339·3322·3e3c···id="idm18393">< | ||
| 00087b | 00087bb0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 00087b | 00087bc0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 00087b | 00087bd0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 00087b | 00087be0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 00087b | 00087bf0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 00087 | 00087c00:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 00087c00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087c10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c20:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087c | 00087c10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00087c20:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00087c30:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 00087c40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00087c | 00087c50:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | ||
| 00087c | 00087c60:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | ||
| 00087c | 00087c70:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00087c | 00087c80:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | ||
| 00087c | 00087c90:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 00087c | 00087ca0:·7072·653e·3c63·6f64·653e·6170·6956·6572··pre><code>apiVer | ||
| 00087c | 00087cb0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | ||
| 00087c | 00087cc0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | ||
| 00087c | 00087cd0:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | ||
| 00087c | 00087ce0:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | ||
| 00087c | 00087cf0:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | ||
| 00087 | 00087d00:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | ||
| 00087d | 00087d10:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | ||
| 00087d | 00087d20:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | ||
| 00087d | 00087d30:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | ||
| 00087d30:·2020·2020·2020·2d20·6e61·6d65·3a20·626c········-·name:·bl | |||
| 00087d40:·7565·746f·6f74·682e·7365·7276·6963·650a··uetooth.service. | |||
| 00087d50:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 00087d60:·2066·616c·7365·0a20·2020·2020·2020·206d···false.········m | |||
| 00087d70:·6173·6b3a·2074·7275·650a·2020·2020·2020··ask:·true.······ | |||
| 00087d | 00087d40:·2020·2d20·6e61·6d65·3a20·626c·7565·746f····-·name:·blueto | ||
| 00087d50:·6f74·682e·7365·7276·6963·650a·2020·2020··oth.service.···· | |||
| Max diff block lines reached; 8582/24642 bytes (34.83%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 19070, 66 lines modified | Offset 19070, 66 lines modified | ||
| 0004a7d0:·7267·6574·3d22·2369·646d·3736·3334·2220··rget="#idm7634"· | 0004a7d0:·7267·6574·3d22·2369·646d·3736·3334·2220··rget="#idm7634"· | ||
| 0004a7e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004a7e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004a7f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004a7f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004a800:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004a800:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004a810:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004a810:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004a820:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004a820:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004a830:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004a830:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004a840:·6e20· | 0004a840:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | ||
| 0004a850:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004a8 | 0004a860:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0004a8 | 0004a870:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0004a8 | 0004a880:·7073·6522·2069·643d·2269·646d·3736·3334··pse"·id="idm7634 | ||
| 0004a8 | 0004a890:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0004a8 | 0004a8a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0004a8 | 0004a8b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004a8 | 0004a8c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0004a8 | 0004a8d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0004a8 | 0004a8e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0004a8e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004a8f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004a900:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0004a | 0004a8f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0004a900:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a910:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a920:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a9 | 0004a930:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a9 | 0004a940:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | ||
| 0004a9 | 0004a950:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0004a9 | 0004a960:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | ||
| 0004a9 | 0004a970:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a9 | 0004a980:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | ||
| 0004a9 | 0004a990:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | ||
| 0004a9 | 0004a9a0:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | ||
| 0004a9 | 0004a9b0:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | ||
| 0004a9 | 0004a9c0:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | ||
| 0004a9 | 0004a9d0:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | ||
| 0004a9 | 0004a9e0:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | ||
| 0004a9 | 0004a9f0:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | ||
| 0004a | 0004aa00:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | ||
| 0004aa | 0004aa10:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | ||
| 0004aa10:·733a·0a20·2020·2020·202d·206e·616d·653a··s:.······-·name: | |||
| 0004aa20:·2064·6562·7567·2d73·6865·6c6c·2e73·6572···debug-shell.ser | |||
| 0004aa30:·7669·6365·0a20·2020·2020·2020·2065·6e61··vice.········ena | |||
| 0004aa40:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | |||
| 0004aa50:·2020·2020·6d61·736b·3a20·7472·7565·0a20······mask:·true.· | |||
| 0004aa | 0004aa20:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | ||
| 0004aa | 0004aa30:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | ||
| 0004aa | 0004aa40:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | ||
| 0004aa | 0004aa50:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | ||
| 0004aa60:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004aa70:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | |||
| 0004aa80:·6865·6c6c·2e73·6f63·6b65·740a·2020·2020··hell.socket.···· | |||
| 0004aa90:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | |||
| 0004aaa0:·7365·0a20·2020·2020·2020·206d·6173·6b3a··se.········mask: | |||
| 0004aa | 0004aab0:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | ||
| 0004aa | 0004aac0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0004aa | 0004aad0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0004aa | 0004aae0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0004aa | 0004aaf0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0004a | 0004ab00:·7461·7267·6574·3d22·2369·646d·3736·3335··target="#idm7635 | ||
| 0004ab | 0004ab10:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004ab | 0004ab20:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004ab | 0004ab30:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004ab | 0004ab40:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004ab | 0004ab50:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004ab | 0004ab60:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004ab70:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0004ab60:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 0004ab70:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0004ab80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | 0004ab80:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004ab90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | 0004ab90:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004aba0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | 0004aba0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004abb0:·646d·3736·3335·223e·3c74·6162·6c65·2063··dm7635"><table·c | 0004abb0:·646d·3736·3335·223e·3c74·6162·6c65·2063··dm7635"><table·c | ||
| 0004abc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | 0004abc0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004abd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | 0004abd0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004abe0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | 0004abe0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00087af0:·3833·3933·2220·7461·6269·6e64·6578·3d22··8393"·tabindex=" | 00087af0:·3833·3933·2220·7461·6269·6e64·6578·3d22··8393"·tabindex=" | ||
| 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00087b50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00087b60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00087b70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00087b80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00087b90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00087ba0:·646d·3138·3339·3322·3e3c·7461·626c·6520··dm18393"><table· | |||
| 00087bb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00087bc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00087bd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00087be0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00087bf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00087c00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00087c10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00087c20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00087c30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 00087c40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00087c50:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00087c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00087c70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00087c80:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00087c90:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00087ca0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | |||
| 00087cb0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00087cc0:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00087cd0:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00087ce0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 00087cf0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 00087d00:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 00087d10:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 00087d20:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 00087d30:·6e69·7473·3a0a·2020·2020·2020·2d20·6e61··nits:.······-·na | |||
| 00087d40:·6d65·3a20·626c·7565·746f·6f74·682e·7365··me:·bluetooth.se | |||
| 00087d50:·7276·6963·650a·2020·2020·2020·2020·656e··rvice.········en | |||
| 00087d60:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | |||
| 00087d70:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | |||
| 00087d80:·2020·2020·2020·2d20·6e61·6d65·3a20·626c········-·name:·bl | |||
| 00087d90:·7565·746f·6f74·682e·736f·636b·6574·0a20··uetooth.socket.· | |||
| 00087da0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00087db0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 00087dc0:·736b·3a20·7472·7565·0a3c·2f63·6f64·653e··sk:·true.</code> | |||
| 00087dd0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00087de0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00087df0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| Max diff block lines reached; 8444/24366 bytes (34.65%) of diff not shown. | |||
| Offset 432, 15 lines modified | Offset 432, 15 lines modified | ||
| 432 | Identifiers:·CCE-82496-1 | 432 | Identifiers:·CCE-82496-1 |
| 433 | ·············_\x8c_\x8u_\x8i····3.4.5 | 433 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 434 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 435 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 436 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 437 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 444 | apiVersion:·machineconfiguration.openshift.io/v1 | 444 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 445 | kind:·MachineConfig | 445 | kind:·MachineConfig |
| 446 | spec: | 446 | spec: |
| Offset 451, 15 lines modified | Offset 451, 15 lines modified | ||
| 451 | ······units: | 451 | ······units: |
| 452 | ······-·name:·debug-shell.service | 452 | ······-·name:·debug-shell.service |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | ······-·name:·debug-shell.socket | 455 | ······-·name:·debug-shell.socket |
| 456 | ········enabled:·false | 456 | ········enabled:·false |
| 457 | ········mask:·true | 457 | ········mask:·true |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | 463 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 464 | kind:·MachineConfig | 464 | kind:·MachineConfig |
| 465 | spec: | 465 | spec: |
| Offset 1881, 15 lines modified | Offset 1881, 15 lines modified | ||
| 1881 | ············_\x8c_\x8u_\x8i············3.1.16 | 1881 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1882 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1883 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1884 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1885 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1886 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1893 | apiVersion:·machineconfiguration.openshift.io/v1 | 1893 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1894 | kind:·MachineConfig | 1894 | kind:·MachineConfig |
| 1895 | spec: | 1895 | spec: |
| Offset 1900, 15 lines modified | Offset 1900, 15 lines modified | ||
| 1900 | ······units: | 1900 | ······units: |
| 1901 | ······-·name:·bluetooth.service | 1901 | ······-·name:·bluetooth.service |
| 1902 | ········enabled:·false | 1902 | ········enabled:·false |
| 1903 | ········mask:·true | 1903 | ········mask:·true |
| 1904 | ······-·name:·bluetooth.socket | 1904 | ······-·name:·bluetooth.socket |
| 1905 | ········enabled:·false | 1905 | ········enabled:·false |
| 1906 | ········mask:·true | 1906 | ········mask:·true |
| 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1907 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1908 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1909 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1910 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1911 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1912 | apiVersion:·machineconfiguration.openshift.io/v1 | 1912 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1913 | kind:·MachineConfig | 1913 | kind:·MachineConfig |
| 1914 | spec: | 1914 | spec: |
| Offset 2218, 15 lines modified | Offset 2218, 15 lines modified | ||
| 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2218 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2219 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2220 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2221 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2222 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2223 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2224 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2230 | apiVersion:·machineconfiguration.openshift.io/v1 | 2230 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2231 | kind:·MachineConfig | 2231 | kind:·MachineConfig |
| 2232 | spec: | 2232 | spec: |
| Offset 2237, 15 lines modified | Offset 2237, 15 lines modified | ||
| 2237 | ······units: | 2237 | ······units: |
| 2238 | ······-·name:·autofs.service | 2238 | ······-·name:·autofs.service |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | ······-·name:·autofs.socket | 2241 | ······-·name:·autofs.socket |
| 2242 | ········enabled:·false | 2242 | ········enabled:·false |
| 2243 | ········mask:·true | 2243 | ········mask:·true |
| 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2249 | apiVersion:·machineconfiguration.openshift.io/v1 | 2249 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2250 | kind:·MachineConfig | 2250 | kind:·MachineConfig |
| 2251 | spec: | 2251 | spec: |
| Offset 19028, 67 lines modified | Offset 19028, 67 lines modified | ||
| 0004a530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0004a530:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0004a540:·6964·6d37·3633·3422·2074·6162·696e·6465··idm7634"·tabinde | 0004a540:·6964·6d37·3633·3422·2074·6162·696e·6465··idm7634"·tabinde | ||
| 0004a550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0004a550:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0004a560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0004a560:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0004a570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0004a570:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0004a580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0004a580:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0004a590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0004a590:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0004a5a0:·656d·6564·6961·7469·6f6e·20 | 0004a5a0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | ||
| 0004a5b0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0004a5 | 0004a5c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0004a5 | 0004a5d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0004a5 | 0004a5e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0004a5 | 0004a5f0:·3d22·6964·6d37·3633·3422·3e3c·7461·626c··="idm7634"><tabl | ||
| 0004a | 0004a600:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0004a6 | 0004a610:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0004a6 | 0004a620:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0004a6 | 0004a630:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0004a6 | 0004a640:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0004a6 | 0004a650:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0004a650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004a660:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004a670:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0004a6 | 0004a660:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0004a670:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004a680:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0004a690:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a6 | 0004a6a0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | ||
| 0004a6 | 0004a6b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0004a6 | 0004a6c0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0004a6 | 0004a6d0:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0004a6 | 0004a6e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0004a6 | 0004a6f0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0004a | 0004a700:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0004a7 | 0004a710:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0004a7 | 0004a720:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0004a7 | 0004a730:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0004a7 | 0004a740:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0004a7 | 0004a750:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0004a7 | 0004a760:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0004a7 | 0004a770:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0004a7 | 0004a780:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | ||
| 0004a780:·2020·2d20·6e61·6d65·3a20·6465·6275·672d····-·name:·debug- | |||
| 0004a790:·7368·656c·6c2e·7365·7276·6963·650a·2020··shell.service.·· | |||
| 0004a7a0:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | |||
| 0004a7b0:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | |||
| 0004a7c0:·6b3a·2074·7275·650a·2020·2020·2020·2d20··k:·true.······-· | |||
| 0004a7 | 0004a790:·6e61·6d65·3a20·6465·6275·672d·7368·656c··name:·debug-shel | ||
| 0004a7 | 0004a7a0:·6c2e·7365·7276·6963·650a·2020·2020·2020··l.service.······ | ||
| 0004a7b0:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a7c0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a7d0:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | |||
| 0004a7e0:·3a20·6465·6275·672d·7368·656c·6c2e·736f··:·debug-shell.so | |||
| 0004a7f0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | |||
| 0004a | 0004a800:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | ||
| 0004a8 | 0004a810:·2020·2020·6d61·736b·3a20·7472·7565·0a3c······mask:·true.< | ||
| 0004a8 | 0004a820:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0004a8 | 0004a830:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0004a8 | 0004a840:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0004a8 | 0004a850:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0004a8 | 0004a860:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0004a8 | 0004a870:·2223·6964·6d37·3633·3522·2074·6162·696e··"#idm7635"·tabin | ||
| 0004a8 | 0004a880:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a8 | 0004a890:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a8 | 0004a8a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a8 | 0004a8b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0004a8 | 0004a8c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a8 | 0004a8d0:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | ||
| 0004a8d0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 0004a8e0:· | 0004a8e0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0004a8f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | 0004a8f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0004a900:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | 0004a900:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0004a910:·7365·2220·6964·3d22·6964·6d37·3633·3522··se"·id="idm7635" | 0004a910:·7365·2220·6964·3d22·6964·6d37·3633·3522··se"·id="idm7635" | ||
| 0004a920:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0004a920:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0004a930:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0004a930:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0004a940:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0004a940:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0004a950:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0004a950:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| Offset 34694, 66 lines modified | Offset 34694, 66 lines modified | ||
| 00087850:·6574·3d22·2369·646d·3138·3339·3322·2074··et="#idm18393"·t | 00087850:·6574·3d22·2369·646d·3138·3339·3322·2074··et="#idm18393"·t | ||
| 00087860:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00087860:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00087870:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00087870:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00087880:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00087880:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00087890:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00087890:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 000878a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 000878a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 000878b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 000878b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000878c0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 000878d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000878e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000878f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00087900:·7365·2220·6964·3d22·6964·6d31·3833·3933··se"·id="idm18393 | |||
| 00087910:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00087920:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00087930:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00087940:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00087950:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00087960:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00087970:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00087980:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00087990:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 000879a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000879b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000879c0:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | |||
| 000879d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000879e0:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | |||
| 000879f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00087a00:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | |||
| 00087a10:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 00087a20:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 00087a30:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 00087a40:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 00087a50:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 00087a60:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| 00087a70:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | |||
| 00087a80:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | |||
| 00087a90:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | |||
| 00087aa0:·2020·2020·202d·206e·616d·653a·2062·6c75·······-·name:·blu | |||
| 00087ab0:·6574·6f6f·7468·2e73·6572·7669·6365·0a20··etooth.service.· | |||
| 00087ac0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00087ad0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 00087ae0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 00087af0:·206e·616d·653a·2062·6c75·6574·6f6f·7468···name:·bluetooth | |||
| 00087b00:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 00087b10:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 00087b20:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 00087b30:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00087b40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00087b50:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00087b60:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 8582/24642 bytes (34.83%) of diff not shown. | |||
| Offset 421, 15 lines modified | Offset 421, 15 lines modified | ||
| 421 | Identifiers:·CCE-82496-1 | 421 | Identifiers:·CCE-82496-1 |
| 422 | ·············_\x8c_\x8u_\x8i····3.4.5 | 422 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 423 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 | 423 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366,·CCI-002235 |
| 424 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 424 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 425 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 425 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 426 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 426 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 433 | apiVersion:·machineconfiguration.openshift.io/v1 | 433 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 434 | kind:·MachineConfig | 434 | kind:·MachineConfig |
| 435 | spec: | 435 | spec: |
| Offset 440, 15 lines modified | Offset 440, 15 lines modified | ||
| 440 | ······units: | 440 | ······units: |
| 441 | ······-·name:·debug-shell.service | 441 | ······-·name:·debug-shell.service |
| 442 | ········enabled:·false | 442 | ········enabled:·false |
| 443 | ········mask:·true | 443 | ········mask:·true |
| 444 | ······-·name:·debug-shell.socket | 444 | ······-·name:·debug-shell.socket |
| 445 | ········enabled:·false | 445 | ········enabled:·false |
| 446 | ········mask:·true | 446 | ········mask:·true |
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 452 | apiVersion:·machineconfiguration.openshift.io/v1 | 452 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 453 | kind:·MachineConfig | 453 | kind:·MachineConfig |
| 454 | spec: | 454 | spec: |
| Offset 1870, 15 lines modified | Offset 1870, 15 lines modified | ||
| 1870 | ············_\x8c_\x8u_\x8i············3.1.16 | 1870 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1871 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1871 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1872 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1872 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1873 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1873 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1874 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1874 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1875 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1875 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1876 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1876 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1882 | apiVersion:·machineconfiguration.openshift.io/v1 | 1882 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1883 | kind:·MachineConfig | 1883 | kind:·MachineConfig |
| 1884 | spec: | 1884 | spec: |
| Offset 1889, 15 lines modified | Offset 1889, 15 lines modified | ||
| 1889 | ······units: | 1889 | ······units: |
| 1890 | ······-·name:·bluetooth.service | 1890 | ······-·name:·bluetooth.service |
| 1891 | ········enabled:·false | 1891 | ········enabled:·false |
| 1892 | ········mask:·true | 1892 | ········mask:·true |
| 1893 | ······-·name:·bluetooth.socket | 1893 | ······-·name:·bluetooth.socket |
| 1894 | ········enabled:·false | 1894 | ········enabled:·false |
| 1895 | ········mask:·true | 1895 | ········mask:·true |
| 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1901 | apiVersion:·machineconfiguration.openshift.io/v1 | 1901 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1902 | kind:·MachineConfig | 1902 | kind:·MachineConfig |
| 1903 | spec: | 1903 | spec: |
| Offset 2207, 15 lines modified | Offset 2207, 15 lines modified | ||
| 2207 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2207 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2208 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2208 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2209 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2209 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2210 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2210 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2211 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2211 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2212 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2212 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2213 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2219 | apiVersion:·machineconfiguration.openshift.io/v1 | 2219 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2220 | kind:·MachineConfig | 2220 | kind:·MachineConfig |
| 2221 | spec: | 2221 | spec: |
| Offset 2226, 15 lines modified | Offset 2226, 15 lines modified | ||
| 2226 | ······units: | 2226 | ······units: |
| 2227 | ······-·name:·autofs.service | 2227 | ······-·name:·autofs.service |
| 2228 | ········enabled:·false | 2228 | ········enabled:·false |
| 2229 | ········mask:·true | 2229 | ········mask:·true |
| 2230 | ······-·name:·autofs.socket | 2230 | ······-·name:·autofs.socket |
| 2231 | ········enabled:·false | 2231 | ········enabled:·false |
| 2232 | ········mask:·true | 2232 | ········mask:·true |
| 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2233 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2234 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2235 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2236 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2237 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2238 | apiVersion:·machineconfiguration.openshift.io/v1 | 2238 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2239 | kind:·MachineConfig | 2239 | kind:·MachineConfig |
| 2240 | spec: | 2240 | spec: |
| Offset 23059, 66 lines modified | Offset 23059, 66 lines modified | ||
| 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | ||
| 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0005a190:·6174·696f·6e20· | 0005a190:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | ||
| 0005a1a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0005a1 | 0005a1b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0005a1 | 0005a1c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0005a1 | 0005a1d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0005a1 | 0005a1e0:·3237·3336·3622·3e3c·7461·626c·6520·636c··27366"><table·cl | ||
| 0005a1 | 0005a1f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0005a | 0005a200:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0005a2 | 0005a210:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0005a2 | 0005a220:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0005a2 | 0005a230:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0005a2 | 0005a240:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0005a250:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0005a260:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0005a270:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0005a280:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0005a290:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0005a2 | 0005a2a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0005a250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0005a260:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0005a270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0005a280:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0005a290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0005a2 | 0005a2b0:·7465·6779·3a3c·2f74·683e·3c74·643e·6469··tegy:</th><td>di | ||
| 0005a2 | 0005a2c0:·7361·626c·653c·2f74·643e·3c2f·7472·3e3c··sable</td></tr>< | ||
| 0005a2 | 0005a2d0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0005a2 | 0005a2e0:·653e·6170·6956·6572·7369·6f6e·3a20·6d61··e>apiVersion:·ma | ||
| 0005a2 | 0005a2f0:·6368·696e·6563·6f6e·6669·6775·7261·7469··chineconfigurati | ||
| 0005a | 0005a300:·6f6e·2e6f·7065·6e73·6869·6674·2e69·6f2f··on.openshift.io/ | ||
| 0005a3 | 0005a310:·7631·0a6b·696e·643a·204d·6163·6869·6e65··v1.kind:·Machine | ||
| 0005a3 | 0005a320:·436f·6e66·6967·0a73·7065·633a·0a20·2063··Config.spec:.··c | ||
| 0005a3 | 0005a330:·6f6e·6669·673a·0a20·2020·2069·676e·6974··onfig:.····ignit | ||
| 0005a3 | 0005a340:·696f·6e3a·0a20·2020·2020·2076·6572·7369··ion:.······versi | ||
| 0005a3 | 0005a350:·6f6e·3a20·332e·312e·300a·2020·2020·7379··on:·3.1.0.····sy | ||
| 0005a3 | 0005a360:·7374·656d·643a·0a20·2020·2020·2075·6e69··stemd:.······uni | ||
| 0005a3 | 0005a370:·7473·3a0a·2020·2020·2020·2d20·6e61·6d65··ts:.······-·name | ||
| 0005a3 | 0005a380:·3a20·7373·6864·2e73·6572·7669·6365·0a20··:·sshd.service.· | ||
| 0005a390:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0005a3a0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 0005a3b0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0005a3c0:·206e·616d·653a·2073·7368·642e·736f·636b···name:·sshd.sock | |||
| 0005a3 | 0005a3d0:·6574·0a20·2020·2020·2020·2065·6e61·626c··et.········enabl | ||
| 0005a3 | 0005a3e0:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | ||
| 0005a3 | 0005a3f0:·2020·6d61·736b·3a20·7472·7565·0a3c·2f63····mask:·true.</c | ||
| 0005a3b0:·2020·202d·206e·616d·653a·2073·7368·642e·····-·name:·sshd. | |||
| 0005a3c0:·736f·636b·6574·0a20·2020·2020·2020·2065··socket.········e | |||
| 0005a3d0:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0005a3e0:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0005a | 0005a400:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0005a4 | 0005a410:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0005a4 | 0005a420:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0005a4 | 0005a430:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0005a4 | 0005a440:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0005a4 | 0005a450:·6964·6d32·3733·3637·2220·7461·6269·6e64··idm27367"·tabind | ||
| 0005a4 | 0005a460:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0005a4 | 0005a470:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0005a4 | 0005a480:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0005a4 | 0005a490:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0005a4 | 0005a4a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0005a4 | 0005a4b0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0005a4b0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0005a4c0:· | 0005a4c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | ||
| 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 23059, 66 lines modified | Offset 23059, 66 lines modified | ||
| 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | 0005a120:·2d74·6172·6765·743d·2223·6964·6d32·3733··-target="#idm273 | ||
| 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0005a130:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0005a140:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0005a150:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0005a160:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0005a170:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0005a180:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0005a190:·6174·696f·6e20· | 0005a190:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | ||
| 0005a1a0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0005a1 | 0005a1b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0005a1 | 0005a1c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0005a1 | 0005a1d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0005a1 | 0005a1e0:·3237·3336·3622·3e3c·7461·626c·6520·636c··27366"><table·cl | ||
| 0005a1 | 0005a1f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0005a | 0005a200:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0005a2 | 0005a210:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0005a2 | 0005a220:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0005a2 | 0005a230:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0005a2 | 0005a240:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0005a250:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0005a260:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0005a270:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0005a280:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0005a290:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0005a2 | 0005a2a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0005a250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0005a260:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0005a270:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0005a280:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0005a290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0005a2 | 0005a2b0:·7465·6779·3a3c·2f74·683e·3c74·643e·6469··tegy:</th><td>di | ||
| 0005a2 | 0005a2c0:·7361·626c·653c·2f74·643e·3c2f·7472·3e3c··sable</td></tr>< | ||
| 0005a2 | 0005a2d0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0005a2 | 0005a2e0:·653e·6170·6956·6572·7369·6f6e·3a20·6d61··e>apiVersion:·ma | ||
| 0005a2 | 0005a2f0:·6368·696e·6563·6f6e·6669·6775·7261·7469··chineconfigurati | ||
| 0005a | 0005a300:·6f6e·2e6f·7065·6e73·6869·6674·2e69·6f2f··on.openshift.io/ | ||
| 0005a3 | 0005a310:·7631·0a6b·696e·643a·204d·6163·6869·6e65··v1.kind:·Machine | ||
| 0005a3 | 0005a320:·436f·6e66·6967·0a73·7065·633a·0a20·2063··Config.spec:.··c | ||
| 0005a3 | 0005a330:·6f6e·6669·673a·0a20·2020·2069·676e·6974··onfig:.····ignit | ||
| 0005a3 | 0005a340:·696f·6e3a·0a20·2020·2020·2076·6572·7369··ion:.······versi | ||
| 0005a3 | 0005a350:·6f6e·3a20·332e·312e·300a·2020·2020·7379··on:·3.1.0.····sy | ||
| 0005a3 | 0005a360:·7374·656d·643a·0a20·2020·2020·2075·6e69··stemd:.······uni | ||
| 0005a3 | 0005a370:·7473·3a0a·2020·2020·2020·2d20·6e61·6d65··ts:.······-·name | ||
| 0005a3 | 0005a380:·3a20·7373·6864·2e73·6572·7669·6365·0a20··:·sshd.service.· | ||
| 0005a390:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0005a3a0:·6661·6c73·650a·2020·2020·2020·2020·6d61··false.········ma | |||
| 0005a3b0:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0005a3c0:·206e·616d·653a·2073·7368·642e·736f·636b···name:·sshd.sock | |||
| 0005a3 | 0005a3d0:·6574·0a20·2020·2020·2020·2065·6e61·626c··et.········enabl | ||
| 0005a3 | 0005a3e0:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | ||
| 0005a3 | 0005a3f0:·2020·6d61·736b·3a20·7472·7565·0a3c·2f63····mask:·true.</c | ||
| 0005a3b0:·2020·202d·206e·616d·653a·2073·7368·642e·····-·name:·sshd. | |||
| 0005a3c0:·736f·636b·6574·0a20·2020·2020·2020·2065··socket.········e | |||
| 0005a3d0:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0005a3e0:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0005a | 0005a400:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0005a4 | 0005a410:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0005a4 | 0005a420:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0005a4 | 0005a430:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0005a4 | 0005a440:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0005a4 | 0005a450:·6964·6d32·3733·3637·2220·7461·6269·6e64··idm27367"·tabind | ||
| 0005a4 | 0005a460:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0005a4 | 0005a470:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0005a4 | 0005a480:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0005a4 | 0005a490:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0005a4 | 0005a4a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0005a4 | 0005a4b0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 0005a4b0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0005a4c0:· | 0005a4c0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0005a4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0005a4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | 0005a4f0:·6522·2069·643d·2269·646d·3237·3336·3722··e"·id="idm27367" | ||
| 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | 0005a500:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | 0005a510:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | 0005a520:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | 0005a530:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 23059, 65 lines modified | Offset 23059, 65 lines modified | ||
| 0005a120:·6574·3d22·2369·646d·3237·3336·3622·2074··et="#idm27366"·t | 0005a120:·6574·3d22·2369·646d·3237·3336·3622·2074··et="#idm27366"·t | ||
| 0005a130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0005a130:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0005a140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0005a140:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0005a150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0005a150:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0005a160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0005a160:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0005a170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0005a170:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0005a180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0005a180:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0005a190:·20 | 0005a190:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | ||
| 0005a1a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0005a1 | 0005a1b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0005a1 | 0005a1c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0005a1 | 0005a1d0:·7365·2220·6964·3d22·6964·6d32·3733·3636··se"·id="idm27366 | ||
| 0005a1 | 0005a1e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0005a1 | 0005a1f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0005a | 0005a200:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0005a2 | 0005a210:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0005a2 | 0005a220:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0005a2 | 0005a230:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0005a230:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0005a240:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0005a250:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | |||
| 0005a2 | 0005a240:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0005a250:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0005a260:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0005a270:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0005a2 | 0005a280:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0005a2 | 0005a290:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | ||
| 0005a2 | 0005a2a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0005a2 | 0005a2b0:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | ||
| 0005a2 | 0005a2c0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0005a2 | 0005a2d0:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | ||
| 0005a2 | 0005a2e0:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | ||
| 0005a2 | 0005a2f0:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | ||
| 0005a | 0005a300:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | ||
| 0005a3 | 0005a310:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | ||
| 0005a3 | 0005a320:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | ||
| 0005a3 | 0005a330:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | ||
| 0005a3 | 0005a340:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | ||
| 0005a3 | 0005a350:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | ||
| 0005a3 | 0005a360:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | ||
| 0005a3 | 0005a370:·2020·2020·202d·206e·616d·653a·2073·7368·······-·name:·ssh | ||
| 0005a3 | 0005a380:·642e·7365·7276·6963·650a·2020·2020·2020··d.service.······ | ||
| 0005a390:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0005a3a0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0005a3b0:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | |||
| 0005a3c0:·3a20·7373·6864·2e73·6f63·6b65·740a·2020··:·sshd.socket.·· | |||
| 0005a3 | 0005a3d0:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0005a3 | 0005a3e0:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0005a3a0:·6b3a·2074·7275·650a·2020·2020·2020·2d20··k:·true.······-· | |||
| 0005a3b0:·6e61·6d65·3a20·7373·6864·2e73·6f63·6b65··name:·sshd.socke | |||
| 0005a3c0:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | |||
| 0005a3d0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0005a3 | 0005a3f0:·6b3a·2074·7275·650a·3c2f·636f·6465·3e3c··k:·true.</code>< | ||
| 0005a | 0005a400:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0005a4 | 0005a410:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0005a4 | 0005a420:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0005a4 | 0005a430:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0005a4 | 0005a440:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0005a4 | 0005a450:·3336·3722·2074·6162·696e·6465·783d·2230··367"·tabindex="0 | ||
| 0005a4 | 0005a460:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0005a4 | 0005a470:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0005a4 | 0005a480:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0005a4 | 0005a490:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0005a4 | 0005a4a0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0005a4b0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0005a4a0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | |||
| 0005a4b0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 0005a4c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | 0005a4c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0005a4d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | 0005a4d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0005a4e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | 0005a4e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0005a4f0:·3d22·6964·6d32·3733·3637·223e·3c74·6162··="idm27367"><tab | 0005a4f0:·3d22·6964·6d32·3733·3637·223e·3c74·6162··="idm27367"><tab | ||
| 0005a500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | 0005a500:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0005a510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | 0005a510:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0005a520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | 0005a520:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab |
| Offset 705, 15 lines modified | Offset 705, 15 lines modified | ||
| 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 705 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 706 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 707 | Severity: ···high | 707 | Severity: ···high |
| 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 708 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 709 | Identifiers:·CCE-86189-8 | 709 | Identifiers:·CCE-86189-8 |
| 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 710 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 711 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 712 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 713 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 714 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 715 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 716 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 717 | apiVersion:·machineconfiguration.openshift.io/v1 | 717 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 718 | kind:·MachineConfig | 718 | kind:·MachineConfig |
| 719 | spec: | 719 | spec: |
| Offset 724, 15 lines modified | Offset 724, 15 lines modified | ||
| 724 | ······units: | 724 | ······units: |
| 725 | ······-·name:·sshd.service | 725 | ······-·name:·sshd.service |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | ······-·name:·sshd.socket | 728 | ······-·name:·sshd.socket |
| 729 | ········enabled:·false | 729 | ········enabled:·false |
| 730 | ········mask:·true | 730 | ········mask:·true |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 736 | apiVersion:·machineconfiguration.openshift.io/v1 | 736 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 737 | kind:·MachineConfig | 737 | kind:·MachineConfig |
| 738 | spec: | 738 | spec: |
| Offset 15095, 281 lines modified | Offset 15095, 281 lines modified | ||
| 0003af60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003af60:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003af70:·3733·3037·2220·7461·6269·6e64·6578·3d22··7307"·tabindex=" | 0003af70:·3733·3037·2220·7461·6269·6e64·6578·3d22··7307"·tabindex=" | ||
| 0003af80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003af80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003af90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003af90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003afa0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003afa0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003afb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003afb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003afc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003afc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003afd0:·6469·6174·696f·6e20·4 | 0003afd0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003afe0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003aff0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b000:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b010:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b020:·3330·3722·3e3c·7461·626c·6520·636c·6173··307"><table·clas | |||
| 0003b030:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b040:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b050:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b060:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b070:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b080:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003 | 0003afe0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003aff0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b000:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b010:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b020:·2220·6964·3d22·6964·6d37·3330·3722·3e3c··"·id="idm7307">< | |||
| 0003b030:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b040:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b050:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b060:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b070:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b080:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b090:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b0a0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b0b0:·7267·6574·3d22·2369·646d·3733·3038·2220··rget="#idm7308"· | |||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b120:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b130:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b140:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b150:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b160:·2069·643d·2269·646d·3733·3038·223e·3c74···id="idm7308"><t | |||
| 0003b170:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b180:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b190:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b1a0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b1b0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b1c0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0c0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b0d0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b0e0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b0f0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b100:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b110:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b120:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b130:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b140:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b150:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b160:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b170:·2d39·3034·3737·2d31·0a20·202d·2043·4a49··-90477-1.··-·CJI | |||
| 0003b180:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b190:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b1a0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b1b0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b1c0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b1d0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b1e0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b1f0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b200:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b210:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b220:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b230:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b240:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b250:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b260:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b270:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b280:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b290:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b2a0:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b2b0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b2c0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b2d0:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b2e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b2f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b300:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b310:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b320:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b330:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b340:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b350:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b360:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b370:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b380:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b390:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b3a0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b3b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b3c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b3d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b3e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b3f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b400:·743d·2223·6964·6d37·3330·3822·2074·6162··t="#idm7308"·tab | |||
| 0003b410:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b420:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b430:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b440:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b450:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b460:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b470:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b480:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b490:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4a0:·6170·7365·2220·6964·3d22·6964·6d37·3330··apse"·id="idm730 | |||
| 0003b4b0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b4c0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4d0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b4e0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b4f0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b500:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b510:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b520:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b530:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b540:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b550:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b560:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b570:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| Max diff block lines reached; 21382500/21419926 bytes (99.83%) of diff not shown. | |||
| Offset 15100, 281 lines modified | Offset 15100, 281 lines modified | ||
| 0003afb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003afb0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003afc0:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | 0003afc0:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | ||
| 0003afd0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003afd0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003afe0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003afe0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003aff0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003aff0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b000:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b000:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b010:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b010:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b020:·656d·6564·6961·7469·6f6e·204 | 0003b020:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b030:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b040:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b050:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b060:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b070:·646d·3733·3037·223e·3c74·6162·6c65·2063··dm7307"><table·c | |||
| 0003b080:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b090:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b0a0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b0b0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b0c0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b0d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0 | 0003b030:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b040:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b050:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b060:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b070:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | |||
| 0003b080:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b090:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b0a0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b0b0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b0c0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b0d0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b0e0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b0f0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b100:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | |||
| 0003b110:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b120:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b130:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b140:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b150:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b160:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b170:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b180:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b190:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b1a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b1b0:·7365·2220·6964·3d22·6964·6d37·3330·3822··se"·id="idm7308" | |||
| 0003b1c0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b1d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b1e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b1f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b200:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b210:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b220:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b110:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b230:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b240:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b250:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b260:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b150:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b160:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b170:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b180:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b190:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b1a0:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b1b0:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b1c0:·4343·452d·3930·3437·372d·310a·2020·2d20··CCE-90477-1.··-· | |||
| 0003b1d0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b1e0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b1f0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b200:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b210:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b220:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b230:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b240:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b250:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b260:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b270:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b280:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b290:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b2a0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b2b0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b2c0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b2d0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b2e0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b2f0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b300:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b310:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b320:·3a0a·2020·2d20·4343·452d·3930·3437·372d··:.··-·CCE-90477- | |||
| 0003b330:·310a·2020·2d20·434a·4953·2d35·2e31·302e··1.··-·CJIS-5.10. | |||
| 0003b340:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b350:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b360:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b370:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b380:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b390:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b3a0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b3b0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b3c0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b3d0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b3e0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b3f0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b400:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b410:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b420:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b430:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b440:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b450:·7267·6574·3d22·2369·646d·3733·3038·2220··rget="#idm7308"· | |||
| 0003b460:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b470:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b480:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b490:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b4a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b4b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b4c0:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b4d0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b4e0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b4f0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b500:·3733·3038·223e·3c74·6162·6c65·2063·6c61··7308"><table·cla | |||
| 0003b510:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b520:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b530:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b540:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b550:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b560:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b570:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b580:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b270:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b280:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b290:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| Max diff block lines reached; 21677257/21714683 bytes (99.83%) of diff not shown. | |||
| Offset 15091, 280 lines modified | Offset 15091, 280 lines modified | ||
| 0003af20:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | 0003af20:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | ||
| 0003af30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 0003af30:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003af90:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003afa0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003afb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003afc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003afd0:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | |||
| 0003afe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003aff0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b000:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b010:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b020:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b030:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b040:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003 | 0003af90:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003afa0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003afb0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003afc0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003afd0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003afe0:·643d·2269·646d·3733·3037·223e·3c70·7265··d="idm7307"><pre | |||
| 0003aff0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b000:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b010:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b020:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b030:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b040:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b050:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b060:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b070:·743d·2223·6964·6d37·3330·3822·2074·6162··t="#idm7308"·tab | |||
| 0003b080:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b090:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b0a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b0b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b0c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b0d0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b0e0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b120:·3d22·6964·6d37·3330·3822·3e3c·7461·626c··="idm7308"><tabl | |||
| 0003b130:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b140:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b150:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b160:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b170:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003b180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b190:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003b1a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003b1b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003b1c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003b1d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003b1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b0c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b0d0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b0e0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003b0f0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003b100:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003b110:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003b120:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b130:·3437·372d·310a·2020·2d20·434a·4953·2d35··477-1.··-·CJIS-5 | |||
| 0003b140:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b150:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b160:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b170:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b180:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b190:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b1a0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b1b0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b1c0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b1d0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b1e0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b1f0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b200:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b210:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b220:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b230:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b240:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b250:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b260:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003b270:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003b280:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003b290:·4343·452d·3930·3437·372d·310a·2020·2d20··CCE-90477-1.··-· | |||
| 0003b2a0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b2b0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b2c0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b2d0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b2e0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b2f0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b300:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b310:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b320:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b330:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b340:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b350:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b360:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b370:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b380:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b390:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b3a0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b3b0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b3c0:·2369·646d·3733·3038·2220·7461·6269·6e64··#idm7308"·tabind | |||
| 0003b3d0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b3e0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b3f0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b400:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b410:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b420:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b430:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b440:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b450:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b460:·6522·2069·643d·2269·646d·3733·3038·223e··e"·id="idm7308"> | |||
| 0003b470:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b480:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b490:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b4a0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b4b0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b1f0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b200:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b210:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b220:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b230:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b240:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| Max diff block lines reached; 9288493/9325781 bytes (99.60%) of diff not shown. | |||
| Offset 118, 14 lines modified | Offset 118, 60 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 146 | if·rpm·--quiet·-q·kernel;·then | ||
| 147 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 148 | ····dnf·install·-y·"aide" | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·--add=aide | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | dnf·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Gather·the·package·facts | 170 | -·name:·Gather·the·package·facts |
| 131 | ··package_facts: | 171 | ··package_facts: |
| Offset 163, 60 lines modified | Offset 209, 14 lines modified | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | package·install·aide | 214 | package·install·aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····dnf·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | dnf·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | Run·the·following·command·to·generate·a·new·database: | 216 | Run·the·following·command·to·generate·a·new·database: |
| 211 | $·sudo·/usr/sbin/aide·--init | 217 | $·sudo·/usr/sbin/aide·--init |
| 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 213 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 219 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 214 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 220 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 215 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 221 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 242, 14 lines modified | Offset 242, 28 lines modified | ||
| 242 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 242 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 243 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 243 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 244 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 244 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 245 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 245 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 246 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 246 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1066295/1071165 bytes (99.55%) of diff not shown. | |||
| Offset 14772, 205 lines modified | Offset 14772, 205 lines modified | ||
| 00039b30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | 00039b30:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 00039b40:·3630·3722·2074·6162·696e·6465·783d·2230··607"·tabindex="0 | 00039b40:·3630·3722·2074·6162·696e·6465·783d·2230··607"·tabindex="0 | ||
| 00039b50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039b60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039b60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039b70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039b70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039b80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039b80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039b90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039b90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039ba0:·6961·7469·6f6e·204 | 00039ba0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00039bb0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00039bc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039bd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039be0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039bf0:·2069·643d·2269·646d·3130·3630·3722·3e3c···id="idm10607">< | |||
| 00039c00:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039c10:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039bb0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00039bc0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039bd0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039be0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039bf0:·3630·3722·3e3c·7461·626c·6520·636c·6173··607"><table·clas | |||
| 00039c00:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039c10:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039c20:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039c30:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039c40:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039c50:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c60:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039c70:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039c80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039c90:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039ca0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039cb0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039cc0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039cd0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039ce0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00039cf0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 00039d00:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039d10:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039d20:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039d30:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039d40:·2d38·3735·3631·2d37·0a20·202d·2065·6e61··-87561-7.··-·ena | |||
| 00039d50:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039d60:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039d70:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039d80:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039d90:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039da0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039db0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039dc0:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039dd0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039 | 00039c20:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | ||
| 00039c30:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039df0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039e00:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039e10:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039e20:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039e30:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 00039e40:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 00039e50:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 00039e60:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 00039e70:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 00039e80:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039e90:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 00039ea0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 00039eb0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 00039ec0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 00039ed0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 00039ee0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039ef0:·2029·0a20·2074·6167·733a·0a20·202d·2043···).··tags:.··-·C | |||
| 00039f00:·4345·2d38·3735·3631·2d37·0a20·202d·2065··CE-87561-7.··-·e | |||
| 00039f10:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039f20:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039f30:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039f40:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039f50:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039f60:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039f70:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039f80:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039f90:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00039fa0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039fb0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039fc0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00039fd0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00039fe0:·6574·3d22·2369·646d·3130·3630·3822·2074··et="#idm10608"·t | |||
| 00039ff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003a000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003a010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003a020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003a030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003a040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a050:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003a060:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a070:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a080:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a090:·3036·3038·223e·3c74·6162·6c65·2063·6c61··0608"><table·cla | |||
| 0003a0a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a0b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a0c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a0d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a0e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a0f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a100:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a110:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a120:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a130:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a140:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a150:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a160:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003a170:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003a180:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003a190:·6163·6b61·6765·2069·6e73·7461·6c6c·2064··ackage·install·d | |||
| 0003a1a0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | |||
| 0003 | 00039c40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003 | 00039c50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003 | 00039c60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003 | 00039c70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003 | 00039c80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003 | 00039c90:·6964·6d31·3036·3038·2220·7461·6269·6e64··idm10608"·tabind | ||
| 0003 | 00039ca0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003 | 00039cb0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003 | 00039cc0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003 | 00039cd0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003 | 00039ce0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003 | 00039cf0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003a270:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003a280:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a290:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| Max diff block lines reached; 2841957/2868343 bytes (99.08%) of diff not shown. | |||
| Offset 84, 14 lines modified | Offset 84, 61 lines modified | ||
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-87561-7 | 87 | Identifiers:·CCE-87561-7 |
| 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | [[packages]] | ||
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 100 | include·install_dnf-automatic | ||
| 101 | class·install_dnf-automatic·{ | ||
| 102 | ··package·{·'dnf-automatic': | ||
| 103 | ····ensure·=>·'installed', | ||
| 104 | ··} | ||
| 105 | } | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 113 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 115 | ····dnf·install·-y·"dnf-automatic" | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=dnf-automatic | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | dnf·install·dnf-automatic | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 97 | ··package_facts: | 138 | ··package_facts: |
| Offset 124, 61 lines modified | Offset 171, 14 lines modified | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | package·install·dnf-automatic | 176 | package·install·dnf-automatic |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"dnf-automatic" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 141 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 143 | ····dnf·install·-y·"dnf-automatic" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | dnf·install·dnf-automatic | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | include·install_dnf-automatic | ||
| 160 | class·install_dnf-automatic·{ | ||
| 161 | ··package·{·'dnf-automatic': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=dnf-automatic | ||
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 178 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 179 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 174 | automatic.conf. | 180 | automatic.conf. |
| 175 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 181 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 176 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 182 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 177 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 183 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 189, 14 lines modified | Offset 189, 56 lines modified | ||
| 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 190 | Identifiers:·CCE-86671-5 | 190 | Identifiers:·CCE-86671-5 |
| 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| Max diff block lines reached; 194249/199439 bytes (97.40%) of diff not shown. | |||
| Offset 15141, 281 lines modified | Offset 15141, 281 lines modified | ||
| 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b240:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b250:·743d·2223·6964·6d37·3330·3722·2074·6162··t="#idm7307"·tab | 0003b250:·743d·2223·6964·6d37·3330·3722·2074·6162··t="#idm7307"·tab | ||
| 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b260:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b270:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b280:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b290:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b2a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b2b0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b2c0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b2d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b2 | 0003b2c0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003b2d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b2e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b2f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b300:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b310:·3733·3037·223e·3c70·7265·3e3c·636f·6465··7307"><pre><code | |||
| 0003b320:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b330:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b340:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b350:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b360:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b370:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b380:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b390:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b3a0:·6d37·3330·3822·2074·6162·696e·6465·783d··m7308"·tabindex= | |||
| 0003b3b0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b3c0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b3d0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b3e0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b3f0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b400:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b | 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b450:·3330·3822·3e3c·7461·626c·6520·636c·6173··308"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b300:·643d·2269·646d·3733·3037·223e·3c74·6162··d="idm7307"><tab | |||
| 0003b310:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b320:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b330:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b340:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b350:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b360:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b370:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b380:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b3a0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b | 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b3d0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b3e0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b3f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b400:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b410:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b420:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b430:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b440:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b450:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b460:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b470:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b480:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b490:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b4a0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b4b0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b4c0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b4d0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b4e0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b4f0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b500:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b510:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b520:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b530:·640a·0a2d·206e·616d·653a·2045·6e73·7572··d..-·name:·Ensur | |||
| 0003b540:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b550:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b560:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b570:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b580:·0a20·2077·6865·6e3a·2027·226b·6572·6e65··.··when:·'"kerne | |||
| 0003b590:·6c22·2069·6e20·616e·7369·626c·655f·6661··l"·in·ansible_fa | |||
| 0003b5a0:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003b5b0:·7461·6773·3a0a·2020·2d20·4343·452d·3930··tags:.··-·CCE-90 | |||
| 0003b5c0:·3437·372d·310a·2020·2d20·434a·4953·2d35··477-1.··-·CJIS-5 | |||
| 0003b5d0:·2e31·302e·312e·330a·2020·2d20·4e49·5354··.10.1.3.··-·NIST | |||
| 0003b5e0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b5f0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b600:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b610:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b620:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b630:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b640:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b650:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b660:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b670:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b680:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b690:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b6a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b6b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b6c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b6d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b6e0:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | |||
| 0003b6f0:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | |||
| 0003b700:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b710:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b720:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b730:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b740:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b750:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b760:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b770:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b780:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b790:·2269·646d·3733·3038·223e·3c74·6162·6c65··"idm7308"><table | |||
| 0003b7a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b7b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b7c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b7d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b7e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b7f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b810:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b | 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| Max diff block lines reached; 24411101/24448527 bytes (99.85%) of diff not shown. | |||
| Offset 15103, 281 lines modified | Offset 15103, 281 lines modified | ||
| 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003aff0:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | 0003aff0:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | ||
| 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b050:·6d65·6469·6174·696f·6e20·4 | 0003b050:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b060:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b070:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b080:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b090:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0a0:·6d37·3330·3722·3e3c·7461·626c·6520·636c··m7307"><table·cl | |||
| 0003b0b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b0c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b0d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b0e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b0f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b100:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b060:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b070:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b080:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b090:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0a0:·7365·2220·6964·3d22·6964·6d37·3330·3722··se"·id="idm7307" | |||
| 0003b0b0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b0c0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b0d0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b0e0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b0f0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b100:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b110:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b120:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b130:·7461·7267·6574·3d22·2369·646d·3733·3038··target="#idm7308 | |||
| 0003b140:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b150:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b160:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b170:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b180:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b190:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1a0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b1b0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1c0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1d0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1e0:·6522·2069·643d·2269·646d·3733·3038·223e··e"·id="idm7308"> | |||
| 0003b1f0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b200:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b210:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b220:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b230:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b240:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b250:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b260:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b140:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b150:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b160:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b170:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b180:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b190:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1a0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b1b0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b1c0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b1d0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b1e0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b1f0:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b200:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b210:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b220:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b230:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b240:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b250:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b260:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b270:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b280:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b290:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b2a0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b2b0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b2c0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b2d0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b2e0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b2f0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b300:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b310:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b320:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003b330:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b340:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b350:·0a20·202d·2043·4345·2d39·3034·3737·2d31··.··-·CCE-90477-1 | |||
| 0003b360:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b370:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b380:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b390:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b3a0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b3b0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b3c0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b3d0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b3e0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b3f0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b400:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b410:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b420:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b430:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b440:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b450:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b460:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b470:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b480:·6765·743d·2223·6964·6d37·3330·3822·2074··get="#idm7308"·t | |||
| 0003b490:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b4a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b4b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b4c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b4d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b4e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b4f0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b500:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b510:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b520:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b530:·3330·3822·3e3c·7461·626c·6520·636c·6173··308"><table·clas | |||
| 0003b540:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b550:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b560:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b570:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b580:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b | 0003b270:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b280:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b5a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b5b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b5c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b5d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| Max diff block lines reached; 11231716/11269142 bytes (99.67%) of diff not shown. | |||
| Offset 103, 14 lines modified | Offset 103, 60 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | include·install_aide | ||
| 120 | class·install_aide·{ | ||
| 121 | ··package·{·'aide': | ||
| 122 | ····ensure·=>·'installed', | ||
| 123 | ··} | ||
| 124 | } | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 131 | if·rpm·--quiet·-q·kernel;·then | ||
| 132 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 133 | ····dnf·install·-y·"aide" | ||
| 134 | fi | ||
| 135 | else | ||
| 136 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 137 | fi | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·--add=aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | dnf·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Gather·the·package·facts | 155 | -·name:·Gather·the·package·facts |
| 116 | ··package_facts: | 156 | ··package_facts: |
| Offset 148, 60 lines modified | Offset 194, 14 lines modified | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | package·install·aide | 199 | package·install·aide |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 164 | if·rpm·--quiet·-q·kernel;·then | ||
| 165 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 166 | ····dnf·install·-y·"aide" | ||
| 167 | fi | ||
| 168 | else | ||
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 170 | fi | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | dnf·install·aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | include·install_aide | ||
| 183 | class·install_aide·{ | ||
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=aide | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 201 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 202 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 205 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 206 | $·sudo·/usr/sbin/aide·--check |
| Offset 220, 14 lines modified | Offset 220, 28 lines modified | ||
| 220 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 220 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 221 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 221 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 224 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1314954/1319973 bytes (99.62%) of diff not shown. | |||
| Offset 15094, 281 lines modified | Offset 15094, 281 lines modified | ||
| 0003af50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003af50:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003af60:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | 0003af60:·6964·6d37·3330·3722·2074·6162·696e·6465··idm7307"·tabinde | ||
| 0003af70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003af70:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003af80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003af80:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003af90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003af90:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003afa0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003afa0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003afb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003afb0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003afc0:·656d·6564·6961·7469·6f6e·204 | 0003afc0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003afd0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003afe0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aff0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b000:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b010:·646d·3733·3037·223e·3c74·6162·6c65·2063··dm7307"><table·c | |||
| 0003b020:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b030:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b040:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b050:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b060:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b070:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003 | 0003afd0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003afe0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003aff0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b000:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b010:·7073·6522·2069·643d·2269·646d·3733·3037··pse"·id="idm7307 | |||
| 0003b020:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b030:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b040:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b050:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b060:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b070:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b080:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b090:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b0a0:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | |||
| 0003b0b0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b0c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b0d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b0e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b0f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b100:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b110:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b120:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b130:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b140:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b150:·7365·2220·6964·3d22·6964·6d37·3330·3822··se"·id="idm7308" | |||
| 0003b160:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b170:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b180:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b190:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b1a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b1b0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b1c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b0b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b1d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b1e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b200:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b0f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b100:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b110:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b120:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b130:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b140:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b150:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b160:·4343·452d·3930·3437·372d·310a·2020·2d20··CCE-90477-1.··-· | |||
| 0003b170:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b180:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b190:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b1a0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b1b0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b1c0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b1d0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b1e0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b1f0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b200:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b210:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b220:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b230:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b240:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b250:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b260:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b270:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b280:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b290:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003b2a0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003b2b0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003b2c0:·3a0a·2020·2d20·4343·452d·3930·3437·372d··:.··-·CCE-90477- | |||
| 0003b2d0:·310a·2020·2d20·434a·4953·2d35·2e31·302e··1.··-·CJIS-5.10. | |||
| 0003b2e0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b2f0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b300:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b310:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b320:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b330:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b340:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b350:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b360:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b370:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b380:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b390:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b3a0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b3b0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b3c0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b3d0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b3e0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b3f0:·7267·6574·3d22·2369·646d·3733·3038·2220··rget="#idm7308"· | |||
| 0003b400:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b410:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b420:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b430:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b440:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b450:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b460:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b470:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b480:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b490:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b4a0:·3733·3038·223e·3c74·6162·6c65·2063·6c61··7308"><table·cla | |||
| 0003b4b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b4c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b4d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b4e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b4f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b500:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b510:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b520:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b210:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b220:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b230:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| Max diff block lines reached; 10844938/10882364 bytes (99.66%) of diff not shown. | |||
| Offset 101, 14 lines modified | Offset 101, 60 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | include·install_aide | ||
| 118 | class·install_aide·{ | ||
| 119 | ··package·{·'aide': | ||
| 120 | ····ensure·=>·'installed', | ||
| 121 | ··} | ||
| 122 | } | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 129 | if·rpm·--quiet·-q·kernel;·then | ||
| 130 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 131 | ····dnf·install·-y·"aide" | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | dnf·install·aide | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Gather·the·package·facts | 153 | -·name:·Gather·the·package·facts |
| 114 | ··package_facts: | 154 | ··package_facts: |
| Offset 146, 60 lines modified | Offset 192, 14 lines modified | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 151 | package·install·aide | 197 | package·install·aide |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 162 | if·rpm·--quiet·-q·kernel;·then | ||
| 163 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 164 | ····dnf·install·-y·"aide" | ||
| 165 | fi | ||
| 166 | else | ||
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 168 | fi | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | dnf·install·aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | include·install_aide | ||
| 181 | class·install_aide·{ | ||
| 182 | ··package·{·'aide': | ||
| 183 | ····ensure·=>·'installed', | ||
| 184 | ··} | ||
| 185 | } | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | package·--add=aide | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 203 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 204 | $·sudo·/usr/sbin/aide·--check |
| Offset 218, 14 lines modified | Offset 218, 28 lines modified | ||
| 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 218 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 219 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 222 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| Max diff block lines reached; 1261372/1266391 bytes (99.60%) of diff not shown. | |||
| Offset 15133, 280 lines modified | Offset 15133, 280 lines modified | ||
| 0003b1c0:·7461·7267·6574·3d22·2369·646d·3733·3037··target="#idm7307 | 0003b1c0:·7461·7267·6574·3d22·2369·646d·3733·3037··target="#idm7307 | ||
| 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b1f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b200:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b210:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b220:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b230:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b2 | 0003b230:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b240:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b250:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b260:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b270:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b280:·3d22·6964·6d37·3330·3722·3e3c·7072·653e··="idm7307"><pre> | |||
| 0003b290:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2a0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2b0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b2c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b2 | 0003b2d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b290:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2 | 0003b2e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b2f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b310:·3d22·2369·646d·3733·3038·2220·7461·6269··="#idm7308"·tabi | |||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b380:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b390:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b3a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b3b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b3c0:·2269·646d·3733·3038·223e·3c74·6162·6c65··"idm7308"><table | |||
| 0003b3d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b3e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b3f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b400:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b410:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003b420:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003b440:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003b450:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003b460:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003b470:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003b480:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b360:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b370:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b380:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003b390:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003b3a0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003b3b0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003b3c0:·6167·733a·0a20·202d·2043·4345·2d39·3034··ags:.··-·CCE-904 | |||
| 0003b3d0:·3737·2d31·0a20·202d·2043·4a49·532d·352e··77-1.··-·CJIS-5. | |||
| 0003b3e0:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b3f0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b400:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b410:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b420:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b430:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b440:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b450:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b460:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b470:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b480:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b490:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b4a0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003b4b0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b4c0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b4d0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b4e0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b4f0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003b500:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003b510:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b520:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b530:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b540:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b550:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b560:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b570:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b580:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b590:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b5a0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b5b0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b5c0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b5d0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b5e0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b5f0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b600:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b610:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b620:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b630:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b640:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b650:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b660:·6964·6d37·3330·3822·2074·6162·696e·6465··idm7308"·tabinde | |||
| 0003b670:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b680:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b690:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6c0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003b6d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b6e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b6f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b700:·2220·6964·3d22·6964·6d37·3330·3822·3e3c··"·id="idm7308">< | |||
| 0003b710:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b720:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b730:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b740:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b750:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b490:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003b4a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b4b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b4c0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b4d0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b4e0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b4f0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b500:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| Max diff block lines reached; 24236243/24273531 bytes (99.85%) of diff not shown. | |||
| Offset 15182, 414 lines modified | Offset 15182, 414 lines modified | ||
| 0003b4d0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b4d0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b4e0:·3936·3622·2074·6162·696e·6465·783d·2230··966"·tabindex="0 | 0003b4e0:·3936·3622·2074·6162·696e·6465·783d·2230··966"·tabindex="0 | ||
| 0003b4f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b4f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b500:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b500:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b510:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b510:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b520:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b520:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b530:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b530:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b540:·6961·7469·6f6e·20 | 0003b540:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003b550:·6 | 0003b550:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003b560:· | 0003b560:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003b570:· | 0003b570:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003b580:· | 0003b580:·7365·2220·6964·3d22·6964·6d36·3936·3622··se"·id="idm6966" | ||
| 0003b590:·3 | 0003b590:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003b5a0:· | 0003b5a0:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003b5b0:· | 0003b5b0:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003b5c0:·6 | 0003b5c0:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003b5d0:· | 0003b5d0:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003b5e0:· | 0003b5e0:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003b5f0:· | 0003b5f0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b600:· | 0003b600:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b610:· | 0003b610:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003b620:· | 0003b620:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003b630:· | 0003b630:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003b640:·3 | 0003b640:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b650:· | 0003b650:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003b660:· | 0003b660:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003b670:·74 | 0003b670:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003b680:·2 | 0003b680:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003b690:· | 0003b690:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003b6a0:·20 | 0003b6a0:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003b6b0:·74 | 0003b6b0:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003b6c0:· | 0003b6c0:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003b6d0:·206 | 0003b6d0:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003b6e0:· | 0003b6e0:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003b6f0:· | 0003b6f0:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003b700:· | 0003b700:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b710:· | 0003b710:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003b720:· | 0003b720:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003b730:·2d | 0003b730:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003b740:·2 | 0003b740:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003b750:· | 0003b750:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003b760:· | 0003b760:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b770:· | 0003b770:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003b780:· | 0003b780:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003b790:· | 0003b790:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003b7a0:· | 0003b7a0:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003b7b0:· | 0003b7b0:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003b7c0:· | 0003b7c0:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003b7d0:·20 | 0003b7d0:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003b7e0:· | 0003b7e0:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003b7f0:· | 0003b7f0:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003b800:· | 0003b800:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003b810:·6 | 0003b810:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003b820:· | 0003b820:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b830:· | 0003b830:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003b840:· | 0003b840:·0a0a·2020·2020·0a20·2020·2064·6e66·2072··..····.····dnf·r | ||
| 0003b850:· | 0003b850:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003b860:· | 0003b860:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003b870:·6 | 0003b870:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003b880:· | 0003b880:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003b890:·6 | 0003b890:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003b8a0:·6 | 0003b8a0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003b8b0:· | 0003b8b0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003b8c0:· | 0003b8c0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003b8d0:· | 0003b8d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b8e0:· | 0003b8e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b8f0:· | 0003b8f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b900:·6 | 0003b900:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b910:·6 | 0003b910:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b920:· | 0003b920:·3639·3637·2220·7461·6269·6e64·6578·3d22··6967"·tabindex=" | ||
| 0003b930:· | 0003b930:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b940:·20 | 0003b940:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b950:·6 | 0003b950:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b960:· | 0003b960:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b970:· | 0003b970:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b980:·6 | 0003b980:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b990:·7 | 0003b990:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003b9a0:·2 | 0003b9a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b9b0:·6 | 0003b9b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b9c0:·6 | 0003b9c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | ||
| 0003b9d0:· | 0003b9d0:·3936·3722·3e3c·7461·626c·6520·636c·6173··967"><table·clas | ||
| 0003b9e0:· | 0003b9e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003b9f0:·7 | 0003b9f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003ba00:· | 0003ba00:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003ba10:· | 0003ba10:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003ba20:· | 0003ba20:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003ba30:·4 | 0003ba30:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003ba40:· | 0003ba40:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003ba50:· | 0003ba50:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003ba60:· | 0003ba60:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003ba70:· | 0003ba70:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003ba80:·3 | 0003ba80:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003ba90:· | 0003ba90:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003baa0:· | 0003baa0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003bab0:· | 0003bab0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003bac0:· | 0003bac0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003bad0:· | 0003bad0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003bae0:· | 0003bae0:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003baf0:· | 0003baf0:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003bb00:·6 | 0003bb00:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003bb10:· | 0003bb10:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003bb20:·202 | 0003bb20:·202d·2043·4345·2d38·3939·3434·2d33·0a20···-·CCE-89944-3.· | ||
| 0003bb30:· | 0003bb30:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003bb40:· | 0003bb40:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003bb50:· | 0003bb50:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003bb60:· | 0003bb60:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003bb70:· | 0003bb70:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003bb80:· | 0003bb80:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003bb90:· | 0003bb90:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003bba0:· | 0003bba0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003bbb0:· | 0003bbb0:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003bbc0:· | 0003bbc0:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003bbd0:· | 0003bbd0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bbe0:· | 0003bbe0:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003bbf0:·2d | 0003bbf0:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003bc00:· | 0003bc00:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003bc10:· | 0003bc10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003bc20:· | 0003bc20:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003bc30:· | 0003bc30:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003bc40:·6 | 0003bc40:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003bc50:·6 | 0003bc50:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003bc60:·6 | 0003bc60:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003bc70:· | 0003bc70:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003bc80:·6 | 0003bc80:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003bc90:· | 0003bc90:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003bca0:·6 | 0003bca0:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| Max diff block lines reached; 6381331/6437111 bytes (99.13%) of diff not shown. | |||
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 103 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 104 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 104 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 113 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 114 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 115 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 116 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 117 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 118 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 119 | fi | ||
| 120 | else | ||
| 121 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 122 | fi | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 115 | -·name:·Gather·the·package·facts | 128 | -·name:·Gather·the·package·facts |
| 116 | ··package_facts: | 129 | ··package_facts: |
| Offset 283, 33 lines modified | Offset 302, 14 lines modified | ||
| 283 | ··-·PCI-DSSv4-11.5.2 | 302 | ··-·PCI-DSSv4-11.5.2 |
| 284 | ··-·high_complexity | 303 | ··-·high_complexity |
| 285 | ··-·high_severity | 304 | ··-·high_severity |
| 286 | ··-·medium_disruption | 305 | ··-·medium_disruption |
| 287 | ··-·no_reboot_needed | 306 | ··-·no_reboot_needed |
| 288 | ··-·restrict_strategy | 307 | ··-·restrict_strategy |
| 289 | ··-·rpm_verify_hashes | 308 | ··-·rpm_verify_hashes |
| 290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 291 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 292 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 293 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 294 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 295 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 296 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 297 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 298 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 299 | fi | ||
| 300 | else | ||
| 301 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 302 | fi | ||
| 303 | Group ·System·Cryptographic·Policies· Group·contains·2·rules | 309 | Group ·System·Cryptographic·Policies· Group·contains·2·rules |
| 304 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: | 310 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Linux·has·the·capability·to·centrally·configure·cryptographic·polices.·The·command·update-crypto-policies·is·used·to·set·the·policy·applicable·for·the·various·cryptographic·back-ends,·such·as·SSL/TLS·libraries.·The·configured·cryptographic·policies·will·be·the·default·policy·used·by·these·backends·unless·the·application·user·configures·them·otherwise.·When·the·system·has·been·configured·to·use·the·centralized·cryptographic·policies,·the·administrator·is·assured·that·any·application·that·utilizes·the·supported·backends·will·follow·a·policy·that·adheres·to·the·configured·profile.·Currently·the·supported·backends·are: |
| 305 | ····*·GnuTLS·library | 311 | ····*·GnuTLS·library |
| 306 | ····*·OpenSSL·library | 312 | ····*·OpenSSL·library |
| 307 | ····*·NSS·library | 313 | ····*·NSS·library |
| 308 | ····*·OpenJDK | 314 | ····*·OpenJDK |
| 309 | ····*·Libkrb5 | 315 | ····*·Libkrb5 |
| Offset 331, 14 lines modified | Offset 331, 58 lines modified | ||
| 331 | ·············_\x8i_\x8s_\x8m······1446 | 331 | ·············_\x8i_\x8s_\x8m······1446 |
| 332 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 332 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 333 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 333 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 334 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 334 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 336 | ·············_\x8c_\x8i_\x8s······1.6.1 | 336 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 337 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 337 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 339 | var_system_crypto_policy='DEFAULT' | ||
| 340 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 341 | rc=$? | ||
| 342 | if·test·"$rc"·=·127;·then | ||
| 343 | » echo·"$stderr_of_call"·>&2 | ||
| 344 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 345 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 346 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 347 | » false··#·end·with·an·error·code | ||
| 348 | elif·test·"$rc"·!=·0;·then | ||
| 349 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 350 | » false··#·end·with·an·error·code | ||
| 351 | fi | ||
| 352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 357 | --- | ||
| 358 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 359 | kind:·MachineConfig | ||
| 360 | spec: | ||
| 361 | ··config: | ||
| 362 | ····ignition: | ||
| 363 | ······version:·3.1.0 | ||
| 364 | ····systemd: | ||
| 365 | ······units: | ||
| 366 | ········-·name:·configure-crypto-policy.service | ||
| 367 | ··········enabled:·true | ||
| 368 | ··········contents:·| | ||
| 369 | ············[Unit] | ||
| 370 | ············Before=kubelet.service | ||
| 371 | ············[Service] | ||
| 372 | ············Type=oneshot | ||
| 373 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 374 | ············RemainAfterExit=yes | ||
| 375 | ············[Install] | ||
| 376 | ············WantedBy=multi-user.target | ||
| 338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 378 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 379 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 380 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 381 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 343 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 382 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 344 | ··set_fact: | 383 | ··set_fact: |
| Offset 385, 58 lines modified | Offset 429, 14 lines modified | ||
| Max diff block lines reached; 687194/693157 bytes (99.14%) of diff not shown. | |||
| Offset 15208, 414 lines modified | Offset 15208, 414 lines modified | ||
| 0003b670:·2d74·6172·6765·743d·2223·6964·6d36·3936··-target="#idm696 | 0003b670:·2d74·6172·6765·743d·2223·6964·6d36·3936··-target="#idm696 | ||
| 0003b680:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b680:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b690:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b690:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b6a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b6a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b6b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b6b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b6c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b6c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b6d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b6e0:·7469·6f6e·20 | 0003b6e0:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b6f0:·7 | 0003b6f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b700:· | 0003b700:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b710:·6 | 0003b710:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b720:· | 0003b720:·2220·6964·3d22·6964·6d36·3936·3622·3e3c··"·id="idm6966">< | ||
| 0003b730:·2 | 0003b730:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b740:· | 0003b740:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b750:· | 0003b750:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b760:· | 0003b760:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b770:·6 | 0003b770:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b780:· | 0003b780:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b790:· | 0003b790:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b7a0:·7 | 0003b7a0:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b7b0:· | 0003b7b0:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b7c0:·3 | 0003b7c0:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b7d0:· | 0003b7d0:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b7e0:· | 0003b7e0:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b7f0:· | 0003b7f0:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b800:·7 | 0003b800:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b810:· | 0003b810:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b820:·6 | 0003b820:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b830:· | 0003b830:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b840:·6 | 0003b840:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b850:· | 0003b850:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b860:· | 0003b860:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b870:· | 0003b870:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b880:· | 0003b880:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b890:· | 0003b890:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b8a0:· | 0003b8a0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b8b0:· | 0003b8b0:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b8c0:· | 0003b8c0:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b8d0:· | 0003b8d0:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b8e0:· | 0003b8e0:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b8f0:· | 0003b8f0:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b900:· | 0003b900:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b910:· | 0003b910:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b920:·2 | 0003b920:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b930:· | 0003b930:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b940:· | 0003b940:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b950:·2 | 0003b950:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003b960:· | 0003b960:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003b970:· | 0003b970:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003b980:· | 0003b980:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003b990:· | 0003b990:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003b9a0:· | 0003b9a0:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003b9b0:· | 0003b9b0:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003b9c0:· | 0003b9c0:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003b9d0:· | 0003b9d0:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003b9e0:· | 0003b9e0:·2020·2020·0a20·2020·2064·6e66·2072·6569······.····dnf·rei | ||
| 0003b9f0:·6 | 0003b9f0:·6e73·7461·6c6c·202d·7920·2470·6163·6b61··nstall·-y·$packa | ||
| 0003ba00:· | 0003ba00:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003ba10:· | 0003ba10:·0a20·2020·200a·6669·0a0a·656c·7365·0a20··.····.fi..else.· | ||
| 0003ba20:· | 0003ba20:·2020·2026·6774·3b26·616d·703b·3220·6563·····>&2·ec | ||
| 0003ba30:·6 | 0003ba30:·686f·2027·5265·6d65·6469·6174·696f·6e20··ho·'Remediation· | ||
| 0003ba40:·7 | 0003ba40:·6973·206e·6f74·2061·7070·6c69·6361·626c··is·not·applicabl | ||
| 0003ba50:·6 | 0003ba50:·652c·206e·6f74·6869·6e67·2077·6173·2064··e,·nothing·was·d | ||
| 0003ba60:· | 0003ba60:·6f6e·6527·0a66·690a·3c2f·636f·6465·3e3c··one'.fi.</code>< | ||
| 0003ba70:· | 0003ba70:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003ba80:· | 0003ba80:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003ba90:· | 0003ba90:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003baa0:· | 0003baa0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003bab0:· | 0003bab0:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003bac0:· | 0003bac0:·3637·2220·7461·6269·6e64·6578·3d22·3022··67"·tabindex="0" | ||
| 0003bad0:· | 0003bad0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bae0:· | 0003bae0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003baf0:·6 | 0003baf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bb00:· | 0003bb00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bb10:·6 | 0003bb10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bb20:·61 | 0003bb20:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003bb30:·6 | 0003bb30:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003bb40:· | 0003bb40:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003bb50:· | 0003bb50:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003bb60:· | 0003bb60:·6170·7365·2220·6964·3d22·6964·6d36·3936··apse"·id="idm696 | ||
| 0003bb70:· | 0003bb70:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003bb80:· | 0003bb80:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003bb90:· | 0003bb90:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003bba0:· | 0003bba0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003bbb0:· | 0003bbb0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003bbc0:· | 0003bbc0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003bbd0:· | 0003bbd0:·3e68·6967·683c·2f74·643e·3c2f·7472·3e3c··>high</td></tr>< | ||
| 0003bbe0:· | 0003bbe0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bbf0:· | 0003bbf0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003bc00:· | 0003bc00:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003bc10:· | 0003bc10:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003bc20:· | 0003bc20:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003bc30:· | 0003bc30:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003bc40:· | 0003bc40:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 0003bc50:· | 0003bc50:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 0003bc60:· | 0003bc60:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003bc70:· | 0003bc70:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | ||
| 0003bc80:· | 0003bc80:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | ||
| 0003bc90:· | 0003bc90:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | ||
| 0003bca0:· | 0003bca0:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | ||
| 0003bcb0:·6 | 0003bcb0:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | ||
| 0003bcc0:·2 | 0003bcc0:·2043·4345·2d38·3939·3434·2d33·0a20·202d···CCE-89944-3.··- | ||
| 0003bcd0:· | 0003bcd0:·2043·4a49·532d·352e·3130·2e34·2e31·0a20···CJIS-5.10.4.1.· | ||
| 0003bce0:· | 0003bce0:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0003bcf0:· | 0003bcf0:·332e·332e·380a·2020·2d20·4e49·5354·2d38··3.3.8.··-·NIST-8 | ||
| 0003bd00:· | 0003bd00:·3030·2d31·3731·2d33·2e34·2e31·0a20·202d··00-171-3.4.1.··- | ||
| 0003bd10:· | 0003bd10:·204e·4953·542d·3830·302d·3533·2d41·552d···NIST-800-53-AU- | ||
| 0003bd20:· | 0003bd20:·3928·3329·0a20·202d·204e·4953·542d·3830··9(3).··-·NIST-80 | ||
| 0003bd30:· | 0003bd30:·302d·3533·2d43·4d2d·3628·6329·0a20·202d··0-53-CM-6(c).··- | ||
| 0003bd40:· | 0003bd40:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bd50:· | 0003bd50:·3628·6429·0a20·202d·204e·4953·542d·3830··6(d).··-·NIST-80 | ||
| 0003bd60:· | 0003bd60:·302d·3533·2d53·492d·370a·2020·2d20·4e49··0-53-SI-7.··-·NI | ||
| 0003bd70:· | 0003bd70:·5354·2d38·3030·2d35·332d·5349·2d37·2831··ST-800-53-SI-7(1 | ||
| 0003bd80:· | 0003bd80:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bd90:· | 0003bd90:·332d·5349·2d37·2836·290a·2020·2d20·5043··3-SI-7(6).··-·PC | ||
| 0003bda0:· | 0003bda0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | ||
| 0003bdb0:· | 0003bdb0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | ||
| 0003bdc0:· | 0003bdc0:·352e·320a·2020·2d20·6869·6768·5f63·6f6d··5.2.··-·high_com | ||
| 0003bdd0:· | 0003bdd0:·706c·6578·6974·790a·2020·2d20·6869·6768··plexity.··-·high | ||
| 0003bde0:· | 0003bde0:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | ||
| 0003bdf0:·6 | 0003bdf0:·6469·756d·5f64·6973·7275·7074·696f·6e0a··dium_disruption. | ||
| 0003be00:· | 0003be00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003be10:·6 | 0003be10:·6564·6564·0a20·202d·2072·6573·7472·6963··eded.··-·restric | ||
| 0003be20:· | 0003be20:·745f·7374·7261·7465·6779·0a20·202d·2072··t_strategy.··-·r | ||
| 0003be30:· | 0003be30:·706d·5f76·6572·6966·795f·6861·7368·6573··pm_verify_hashes | ||
| 0003be40:· | 0003be40:·0a0a·2d20·6e61·6d65·3a20·2753·6574·2066··..-·name:·'Set·f | ||
| Max diff block lines reached; 19460128/19515908 bytes (99.71%) of diff not shown. | |||
| Offset 15120, 280 lines modified | Offset 15120, 280 lines modified | ||
| 0003b0f0:·6172·6765·743d·2223·6964·6d37·3330·3722··arget="#idm7307" | 0003b0f0:·6172·6765·743d·2223·6964·6d37·3330·3722··arget="#idm7307" | ||
| 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b100:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b110:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b120:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b130:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b140:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b150:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b160:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b170:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b180:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b190:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1a0:·6522·2069·643d·2269·646d·3733·3037·223e··e"·id="idm7307"> | |||
| 0003b1b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b1c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b1d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b1e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b1f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b200:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b210:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b160:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b170:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b180:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b190:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b1a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b1b0:·2269·646d·3733·3037·223e·3c70·7265·3e3c··"idm7307"><pre>< | |||
| 0003b1c0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b1d0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b1e0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b1f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b200:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b210:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b220:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b230:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b240:·2223·6964·6d37·3330·3822·2074·6162·696e··"#idm7308"·tabin | |||
| 0003b250:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b260:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b270:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b280:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b290:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b2a0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b2b0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b2c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b2d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b2e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b2f0:·6964·6d37·3330·3822·3e3c·7461·626c·6520··idm7308"><table· | |||
| 0003b300:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b310:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b320:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b330:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b340:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b350:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b360:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b370:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b380:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b390:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b3a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b3b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b290:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b2a0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b2b0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b2c0:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b2d0:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b2e0:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b2f0:·6773·3a0a·2020·2d20·4343·452d·3930·3437··gs:.··-·CCE-9047 | |||
| 0003b300:·372d·310a·2020·2d20·434a·4953·2d35·2e31··7-1.··-·CJIS-5.1 | |||
| 0003b310:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b320:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b330:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b340:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b350:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b360:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b370:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b380:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b390:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b3a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3c0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b3d0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003b3e0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b3f0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b400:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b410:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b420:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003b430:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003b440:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b450:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b460:·452d·3930·3437·372d·310a·2020·2d20·434a··E-90477-1.··-·CJ | |||
| 0003b470:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b540:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b550:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b560:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b570:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b580:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b590:·646d·3733·3038·2220·7461·6269·6e64·6578··dm7308"·tabindex | |||
| 0003b5a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b5b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b5c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b5d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b5e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b5f0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003b600:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b610:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b620:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b630:·2069·643d·2269·646d·3733·3038·223e·3c74···id="idm7308"><t | |||
| 0003b640:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b650:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b660:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b670:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b680:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b3c0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b3d0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b3e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b3f0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b400:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b410:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| Max diff block lines reached; 10873093/10910381 bytes (99.66%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 60 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | include·install_aide | ||
| 122 | class·install_aide·{ | ||
| 123 | ··package·{·'aide': | ||
| 124 | ····ensure·=>·'installed', | ||
| 125 | ··} | ||
| 126 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·rpm·--quiet·-q·kernel;·then | ||
| 134 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 135 | ····dnf·install·-y·"aide" | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | dnf·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 118 | ··package_facts: | 158 | ··package_facts: |
| Offset 150, 60 lines modified | Offset 196, 14 lines modified | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | package·install·aide | 201 | package·install·aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····dnf·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | dnf·install·aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 279, 14 lines modified | Offset 279, 58 lines modified | ||
| 279 | ·············_\x8i_\x8s_\x8m······1446 | 279 | ·············_\x8i_\x8s_\x8m······1446 |
| 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1134643/1140195 bytes (99.51%) of diff not shown. | |||
| Offset 15124, 280 lines modified | Offset 15124, 280 lines modified | ||
| 0003b130:·7267·6574·3d22·2369·646d·3733·3037·2220··rget="#idm7307"· | 0003b130:·7267·6574·3d22·2369·646d·3733·3037·2220··rget="#idm7307"· | ||
| 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b1a0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b1b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b1c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b1d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b1e0:·2220·6964·3d22·6964·6d37·3330·3722·3e3c··"·id="idm7307">< | |||
| 0003b1f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b200:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b210:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b220:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b230:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b240:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b250:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b1a0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b1b0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b1c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b1d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b1e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b1f0:·6964·6d37·3330·3722·3e3c·7072·653e·3c63··idm7307"><pre><c | |||
| 0003b200:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b210:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b220:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b230:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b240:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b250:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b260:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b270:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b280:·2369·646d·3733·3038·2220·7461·6269·6e64··#idm7308"·tabind | |||
| 0003b290:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b2a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b2b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b2c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b2d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b2e0:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b2f0:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b300:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b310:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b320:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b330:·646d·3733·3038·223e·3c74·6162·6c65·2063··dm7308"><table·c | |||
| 0003b340:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b350:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b360:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b370:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b380:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b | 0003b390:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b3a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b3b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b3c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b3d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b2b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b2c0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b2d0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b2e0:·3e3c·636f·6465·3e2d·206e·616d·653a·2047··><code>-·name:·G | |||
| 0003b2f0:·6174·6865·7220·7468·6520·7061·636b·6167··ather·the·packag | |||
| 0003b300:·6520·6661·6374·730a·2020·7061·636b·6167··e·facts.··packag | |||
| 0003b310:·655f·6661·6374·733a·0a20·2020·206d·616e··e_facts:.····man | |||
| 0003b320:·6167·6572·3a20·6175·746f·0a20·2074·6167··ager:·auto.··tag | |||
| 0003b330:·733a·0a20·202d·2043·4345·2d39·3034·3737··s:.··-·CCE-90477 | |||
| 0003b340:·2d31·0a20·202d·2043·4a49·532d·352e·3130··-1.··-·CJIS-5.10 | |||
| 0003b350:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | |||
| 0003b360:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b370:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b380:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b390:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b3a0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b3b0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b3c0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b3d0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b3e0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b3f0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b400:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b410:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0003b420:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b430:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b440:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b450:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b460:·656e·740a·2020·7768·656e·3a20·2722·6b65··ent.··when:·'"ke | |||
| 0003b470:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003b480:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b490:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b4a0:·2d39·3034·3737·2d31·0a20·202d·2043·4a49··-90477-1.··-·CJI | |||
| 0003b4b0:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b4c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b4d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b4e0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b4f0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b500:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b510:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b520:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b530:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b540:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b550:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b560:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b570:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b580:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b590:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b5a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b5b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b5c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b5d0:·6d37·3330·3822·2074·6162·696e·6465·783d··m7308"·tabindex= | |||
| 0003b5e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b5f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b600:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b610:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b620:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b630:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003b640:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b650:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b660:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b670:·6964·3d22·6964·6d37·3330·3822·3e3c·7461··id="idm7308"><ta | |||
| 0003b680:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b690:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b6a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b6b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b6c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b6d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b | 0003b3e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b3f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b400:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| Max diff block lines reached; 10873300/10910588 bytes (99.66%) of diff not shown. | |||
| Offset 106, 14 lines modified | Offset 106, 60 lines modified | ||
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.1 | 111 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | include·install_aide | ||
| 123 | class·install_aide·{ | ||
| 124 | ··package·{·'aide': | ||
| 125 | ····ensure·=>·'installed', | ||
| 126 | ··} | ||
| 127 | } | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | dnf·install·aide | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 119 | ··package_facts: | 159 | ··package_facts: |
| Offset 151, 60 lines modified | Offset 197, 14 lines modified | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | package·install·aide | 202 | package·install·aide |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 167 | if·rpm·--quiet·-q·kernel;·then | ||
| 168 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 169 | ····dnf·install·-y·"aide" | ||
| 170 | fi | ||
| 171 | else | ||
| 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 173 | fi | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | dnf·install·aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 185 | include·install_aide | ||
| 186 | class·install_aide·{ | ||
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·--add=aide | ||
| 197 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 203 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 198 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 204 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 199 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 205 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 200 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 206 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 280, 14 lines modified | Offset 280, 58 lines modified | ||
| 280 | ·············_\x8i_\x8s_\x8m······1446 | 280 | ·············_\x8i_\x8s_\x8m······1446 |
| 281 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 281 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 282 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 282 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 283 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 283 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 284 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 284 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1134643/1140195 bytes (99.51%) of diff not shown. | |||
| Offset 15121, 281 lines modified | Offset 15121, 281 lines modified | ||
| 0003b100:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b100:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b110:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | 0003b110:·646d·3733·3037·2220·7461·6269·6e64·6578··dm7307"·tabindex | ||
| 0003b120:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b120:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b130:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b130:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b140:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b140:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b150:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b150:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b160:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b160:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b170:·6d65·6469·6174·696f·6e20·4 | 0003b170:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b180:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003b180:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b190:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1c0:·6d37·3330·3722·3e3c·7461·626c·6520·636c··m7307"><table·cl | |||
| 0003b1d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b1e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b200:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b210:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b220:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b230:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b240:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b250:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b260:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b270:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b280:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b290:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b2a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b2b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b2c0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b2d0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b2e0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b2f0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b300:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b310:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b320:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b330:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b340:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b350:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b360:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b370:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b380:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b390:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b3a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b3b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b3c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b3d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b3e0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b3f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b400:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b410:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b420:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b430:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b440:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003b450:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b460:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b470:·0a20·202d·2043·4345·2d39·3034·3737·2d31··.··-·CCE-90477-1 | |||
| 0003b480:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b490:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b4a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b4c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b4d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b4e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b4f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b500:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b510:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b520:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b530:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b540:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b550:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b560:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b570:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b580:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b590:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5a0:·6765·743d·2223·6964·6d37·3330·3822·2074··get="#idm7308"·t | |||
| 0003b5b0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b5c0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b5d0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b5e0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b5f0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b600:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b610:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b620:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b630:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b640:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b650:·3330·3822·3e3c·7461·626c·6520·636c·6173··308"><table·clas | |||
| 0003b660:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b670:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b680:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b690:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b6a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b6b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b6c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b6d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b6e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b6f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b700:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b710:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b720:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b730:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b740:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b750:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003b760:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b770:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b780:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b790:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b7a0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b7b0:·6765·743d·2223·6964·6d37·3330·3922·2074··get="#idm7309"·t | |||
| 0003b7c0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b7d0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b7e0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b7f0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b800:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b810:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b820:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b830:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b840:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b850:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b860:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b870:·646d·3733·3039·223e·3c70·7265·3e3c·636f··dm7309"><pre><co | |||
| 0003b880:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b890:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b8a0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b8b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b8c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b8d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| Max diff block lines reached; 10872334/10909760 bytes (99.66%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 60 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | include·install_aide | ||
| 122 | class·install_aide·{ | ||
| 123 | ··package·{·'aide': | ||
| 124 | ····ensure·=>·'installed', | ||
| 125 | ··} | ||
| 126 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·rpm·--quiet·-q·kernel;·then | ||
| 134 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 135 | ····dnf·install·-y·"aide" | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | dnf·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 118 | ··package_facts: | 158 | ··package_facts: |
| Offset 150, 60 lines modified | Offset 196, 14 lines modified | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | package·install·aide | 201 | package·install·aide |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 166 | if·rpm·--quiet·-q·kernel;·then | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 168 | ····dnf·install·-y·"aide" | ||
| 169 | fi | ||
| 170 | else | ||
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 172 | fi | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | dnf·install·aide | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | package·--add=aide | ||
| 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 202 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 203 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 204 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 205 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 279, 14 lines modified | Offset 279, 58 lines modified | ||
| 279 | ·············_\x8i_\x8s_\x8m······1446 | 279 | ·············_\x8i_\x8s_\x8m······1446 |
| 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 280 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 281 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 282 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 283 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| Max diff block lines reached; 1134643/1140195 bytes (99.51%) of diff not shown. | |||
| Offset 15425, 251 lines modified | Offset 15425, 251 lines modified | ||
| 0003c400:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003c400:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003c410:·6d37·3934·3522·2074·6162·696e·6465·783d··m7945"·tabindex= | 0003c410:·6d37·3934·3522·2074·6162·696e·6465·783d··m7945"·tabindex= | ||
| 0003c420:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003c420:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003c430:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003c430:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003c440:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003c440:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003c450:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003c450:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003c460:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003c460:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003c470:·6564·6961·7469·6f6e·204 | 0003c470:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003c480:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003c490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c4c0:·6522·2069·643d·2269·646d·3739·3435·223e··e"·id="idm7945"> | |||
| 0003c480:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c490:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c4a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c4b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c4c0:·3739·3435·223e·3c74·6162·6c65·2063·6c61··7945"><table·cla | |||
| 0003c4d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c4e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c4f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c500:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c510:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c520:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c530:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c540:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c550:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c560:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c570:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c580:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c590:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c5a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c5b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003c5c0:·6e61·6d65·3a20·456e·7375·7265·2063·7279··name:·Ensure·cry | |||
| 0003c5d0:·7074·6f2d·706f·6c69·6369·6573·2069·7320··pto-policies·is· | |||
| 0003c5e0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003c5f0:·6167·653a·0a20·2020·206e·616d·653a·2063··age:.····name:·c | |||
| 0003c600:·7279·7074·6f2d·706f·6c69·6369·6573·0a20··rypto-policies.· | |||
| 0003c610:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003c620:·740a·2020·7461·6773·3a0a·2020·2d20·4343··t.··tags:.··-·CC | |||
| 0003c630:·452d·3839·3636·382d·380a·2020·2d20·656e··E-89668-8.··-·en | |||
| 0003c640:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c650:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c660:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c670:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003c680:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003c690:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003c6a0:·2070·6163·6b61·6765·5f63·7279·7074·6f2d···package_crypto- | |||
| 0003c6b0:·706f·6c69·6369·6573·5f69·6e73·7461·6c6c··policies_install | |||
| 0003c6c0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003c6d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003c6e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003c6f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003c700:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003c710:·6765·743d·2223·6964·6d37·3934·3622·2074··get="#idm7946"·t | |||
| 0003c720:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003c730:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003c740:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003c750:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003c760:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003c770:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003c780:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003c790:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003c7a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003c7b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003c7c0:·3934·3622·3e3c·7461·626c·6520·636c·6173··946"><table·clas | |||
| 0003c7d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003c7e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003c7f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003c800:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003c810:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003c820:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c830:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003c840:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003c850:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c860:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003c870:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003c880:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003c890:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003c8a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003c | 0003c4d0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003c4e0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003c8c0:·636b·6167·6520·696e·7374·616c·6c20·6372··ckage·install·cr | |||
| 0003c8d0:·7970·746f·2d70·6f6c·6963·6965·730a·3c2f··ypto-policies.</ | |||
| 0003c8e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c8f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c900:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c910:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c920:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c930:·2369·646d·3739·3437·2220·7461·6269·6e64··#idm7947"·tabind | |||
| 0003c940:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c950:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c960:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c970:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c980:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c990:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003c9a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003c9b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003c9c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003c9d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003c9e0:·6170·7365·2220·6964·3d22·6964·6d37·3934··apse"·id="idm794 | |||
| 0003c9f0:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003ca00:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003ca10:·203d·2022·6372·7970·746f·2d70·6f6c·6963···=·"crypto-polic | |||
| 0003ca20:·6965·7322·0a76·6572·7369·6f6e·203d·2022··ies".version·=·" | |||
| 0003ca30:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003ca40:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003ca50:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003ca60:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003ca70:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003ca80:·6765·743d·2223·6964·6d37·3934·3822·2074··get="#idm7948"·t | |||
| 0003ca90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003caa0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003cab0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003cac0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003cad0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003cae0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003caf0:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0003cb00:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003cb10:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003cb20:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003cb30:·3d22·6964·6d37·3934·3822·3e3c·7461·626c··="idm7948"><tabl | |||
| 0003cb40:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003cb50:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003cb60:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003cb70:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003cb80:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| Max diff block lines reached; 6755544/6788830 bytes (99.51%) of diff not shown. | |||
| Offset 129, 78 lines modified | Offset 129, 78 lines modified | ||
| 129 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 129 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 130 | Severity: ···medium | 130 | Severity: ···medium |
| 131 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 131 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 132 | Identifiers:·CCE-89668-8 | 132 | Identifiers:·CCE-89668-8 |
| 133 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 133 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| 134 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 134 | References:··_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | -·name:·Ensure·crypto-policies·is·installed | ||
| 142 | ··package: | ||
| 143 | ····name:·crypto-policies | ||
| 144 | ····state:·present | ||
| 145 | ··tags: | ||
| 146 | ··-·CCE-89668-8 | ||
| 147 | ··-·enable_strategy | ||
| 148 | ··-·low_complexity | ||
| 149 | ··-·low_disruption | ||
| 150 | ··-·medium_severity | ||
| 151 | ··-·no_reboot_needed | ||
| 152 | ··-·package_crypto-policies_installed | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | package·install·crypto-policies | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | [[packages]] | 137 | [[packages]] |
| 161 | name·=·"crypto-policies" | 138 | name·=·"crypto-policies" |
| 162 | version·=·"*" | 139 | version·=·"*" |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | include·install_crypto-policies | ||
| 146 | class·install_crypto-policies·{ | ||
| 147 | ··package·{·'crypto-policies': | ||
| 148 | ····ensure·=>·'installed', | ||
| 149 | ··} | ||
| 150 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 156 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 169 | ····dnf·install·-y·"crypto-policies" | 157 | ····dnf·install·-y·"crypto-policies" |
| 170 | fi | 158 | fi |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·--add=crypto-policies | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | dnf·install·crypto-policies | 170 | dnf·install·crypto-policies |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | include·install_crypto-policies | ||
| 183 | class·install_crypto-policies·{ | ||
| 184 | ··package·{·'crypto-policies': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | 176 | -·name:·Ensure·crypto-policies·is·installed | |
| 177 | ··package: | ||
| 178 | ····name:·crypto-policies | ||
| 179 | ····state:·present | ||
| 180 | ··tags: | ||
| 181 | ··-·CCE-89668-8 | ||
| 182 | ··-·enable_strategy | ||
| 183 | ··-·low_complexity | ||
| 184 | ··-·low_disruption | ||
| 185 | ··-·medium_severity | ||
| 186 | ··-·no_reboot_needed | ||
| 187 | ··-·package_crypto-policies_installed | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | package· | 193 | package·install·crypto-policies |
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 195 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 196 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 196 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 197 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 197 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 198 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 198 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 199 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 199 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 200 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 200 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 212, 14 lines modified | Offset 212, 58 lines modified | ||
| 212 | ·············_\x8i_\x8s_\x8m······1446 | 212 | ·············_\x8i_\x8s_\x8m······1446 |
| 213 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 213 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 214 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 214 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 215 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 215 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 217 | ·············_\x8c_\x8i_\x8s······1.6.1 | 217 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 218 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 220 | var_system_crypto_policy='FIPS:OSPP' | ||
| 221 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 222 | rc=$? | ||
| 223 | if·test·"$rc"·=·127;·then | ||
| 224 | » echo·"$stderr_of_call"·>&2 | ||
| 225 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| Max diff block lines reached; 905523/913933 bytes (99.08%) of diff not shown. | |||
| Offset 15210, 414 lines modified | Offset 15210, 414 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3639··a-target="#idm69 | ||
| 0003b6a0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | 0003b6a0:·3636·2220·7461·6269·6e64·6578·3d22·3022··66"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20· | 0003b700:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | ||
| 0003b710:· | 0003b710:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | ||
| 0003b720:· | 0003b720:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b730:·6 | 0003b730:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b740:·6 | 0003b740:·6522·2069·643d·2269·646d·3639·3636·223e··e"·id="idm6966"> | ||
| 0003b750:·3 | 0003b750:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | ||
| 0003b760:· | 0003b760:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | ||
| 0003b770:·69 | 0003b770:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | ||
| 0003b780:· | 0003b780:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | ||
| 0003b790:· | 0003b790:·0a69·6620·2120·2820·7b20·7270·6d20·2d2d··.if·!·(·{·rpm·-- | ||
| 0003b7a0:·7 | 0003b7a0:·7175·6965·7420·2d71·206b·6572·6e65·6c20··quiet·-q·kernel· | ||
| 0003b7b0:·3 | 0003b7b0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003b7c0:·7 | 0003b7c0:·7270·6d20·2d2d·7175·6965·7420·2d71·2072··rpm·--quiet·-q·r | ||
| 0003b7d0:· | 0003b7d0:·706d·2d6f·7374·7265·6520·3b7d·2026·616d··pm-ostree·;}·&am | ||
| 0003b7e0:· | 0003b7e0:·703b·2661·6d70·3b20·7b20·7270·6d20·2d2d··p;&·{·rpm·-- | ||
| 0003b7f0:·7 | 0003b7f0:·7175·6965·7420·2d71·2062·6f6f·7463·203b··quiet·-q·bootc·; | ||
| 0003b800:·7 | 0003b800:·7d20·2661·6d70·3b26·616d·703b·207b·2021··}·&&·{·! | ||
| 0003b810:· | 0003b810:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b820:·6 | 0003b820:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | ||
| 0003b830:·7 | 0003b830:·7420·3b7d·2029·3b20·7468·656e·0a0a·2320··t·;}·);·then..#· | ||
| 0003b840:· | 0003b840:·4669·6e64·2077·6869·6368·2066·696c·6573··Find·which·files | ||
| 0003b850:· | 0003b850:·2068·6176·6520·696e·636f·7272·6563·7420···have·incorrect· | ||
| 0003b860:· | 0003b860:·6861·7368·2028·6e6f·7420·696e·202f·6574··hash·(not·in·/et | ||
| 0003b870:· | 0003b870:·632c·2062·6563·6175·7365·206f·6620·7468··c,·because·of·th | ||
| 0003b880:·73 | 0003b880:·6520·7379·7374·656d·2072·656c·6174·6564··e·system·related | ||
| 0003b890:· | 0003b890:·2063·6f6e·6669·6720·6669·6c65·7329·2061···config·files)·a | ||
| 0003b8a0:· | 0003b8a0:·6e64·2074·6865·6e20·6765·7420·6669·6c65··nd·then·get·file | ||
| 0003b8b0:· | 0003b8b0:·7320·6e61·6d65·730a·6669·6c65·735f·7769··s·names.files_wi | ||
| 0003b8c0:· | 0003b8c0:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b8d0:· | 0003b8d0:·683d·2224·2872·706d·202d·5661·202d·2d6e··h="$(rpm·-Va·--n | ||
| 0003b8e0:· | 0003b8e0:·6f63·6f6e·6669·6720·7c20·6772·6570·202d··oconfig·|·grep·- | ||
| 0003b8f0:· | 0003b8f0:·4520·275e·2e2e·3527·207c·2061·776b·2027··E·'^..5'·|·awk·' | ||
| 0003b900:· | 0003b900:·7b70·7269·6e74·2024·4e46·7d27·2029·220a··{print·$NF}'·)". | ||
| 0003b910:· | 0003b910:·0a69·6620·5b20·2d6e·2022·2466·696c·6573··.if·[·-n·"$files | ||
| 0003b920:· | 0003b920:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b930:· | 0003b930:·6861·7368·2220·5d3b·2074·6865·6e0a·2020··hash"·];·then.·· | ||
| 0003b940:· | 0003b940:·2020·2320·4672·6f6d·2066·696c·6573·206e····#·From·files·n | ||
| 0003b950:· | 0003b950:·616d·6573·2067·6574·2070·6163·6b61·6765··ames·get·package | ||
| 0003b960:·2 | 0003b960:·206e·616d·6573·2061·6e64·2063·6861·6e67···names·and·chang | ||
| 0003b970:· | 0003b970:·6520·6e65·776c·696e·6520·746f·2073·7061··e·newline·to·spa | ||
| 0003b980:· | 0003b980:·6365·2c20·6265·6361·7573·6520·7270·6d20··ce,·because·rpm· | ||
| 0003b990:· | 0003b990:·7772·6974·6573·2065·6163·6820·7061·636b··writes·each·pack | ||
| 0003b9a0:· | 0003b9a0:·6167·6520·746f·206e·6577·206c·696e·650a··age·to·new·line. | ||
| 0003b9b0:· | 0003b9b0:·2020·2020·7061·636b·6167·6573·5f74·6f5f······packages_to_ | ||
| 0003b9c0:· | 0003b9c0:·7265·696e·7374·616c·6c3d·2224·2872·706d··reinstall="$(rpm | ||
| 0003b9d0:· | 0003b9d0:·202d·7166·2024·6669·6c65·735f·7769·7468···-qf·$files_with | ||
| 0003b9e0:· | 0003b9e0:·5f69·6e63·6f72·7265·6374·5f68·6173·6820··_incorrect_hash· | ||
| 0003b9f0:· | 0003b9f0:·7c20·7472·2027·5c6e·2720·2720·2729·220a··|·tr·'\n'·'·')". | ||
| 0003ba00:· | 0003ba00:·0a20·2020·200a·2020·2020·646e·6620·7265··.····.····dnf·re | ||
| 0003ba10:· | 0003ba10:·696e·7374·616c·6c20·2d79·2024·7061·636b··install·-y·$pack | ||
| 0003ba20:· | 0003ba20:·6167·6573·5f74·6f5f·7265·696e·7374·616c··ages_to_reinstal | ||
| 0003ba30:·6 | 0003ba30:·6c0a·2020·2020·0a66·690a·0a65·6c73·650a··l.····.fi..else. | ||
| 0003ba40:· | 0003ba40:·2020·2020·2667·743b·2661·6d70·3b32·2065······>&2·e | ||
| 0003ba50:·6 | 0003ba50:·6368·6f20·2752·656d·6564·6961·7469·6f6e··cho·'Remediation | ||
| 0003ba60:·63 | 0003ba60:·2069·7320·6e6f·7420·6170·706c·6963·6162···is·not·applicab | ||
| 0003ba70:·6 | 0003ba70:·6c65·2c20·6e6f·7468·696e·6720·7761·7320··le,·nothing·was· | ||
| 0003ba80:·6 | 0003ba80:·646f·6e65·270a·6669·0a3c·2f63·6f64·653e··done'.fi.</code> | ||
| 0003ba90:· | 0003ba90:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 0003baa0:· | 0003baa0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 0003bab0:·6 | 0003bab0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0003bac0:·6 | 0003bac0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003bad0:· | 0003bad0:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003bae0:· | 0003bae0:·3936·3722·2074·6162·696e·6465·783d·2230··967"·tabindex="0 | ||
| 0003baf0:· | 0003baf0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bb00:· | 0003bb00:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bb10:·6 | 0003bb10:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bb20:· | 0003bb20:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bb30:·686 | 0003bb30:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bb40:· | 0003bb40:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 0003bb50:·6 | 0003bb50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0003bb60:· | 0003bb60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003bb70:·6 | 0003bb70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003bb80:·6 | 0003bb80:·6c61·7073·6522·2069·643d·2269·646d·3639··lapse"·id="idm69 | ||
| 0003bb90:· | 0003bb90:·3637·223e·3c74·6162·6c65·2063·6c61·7373··67"><table·class | ||
| 0003bba0:· | 0003bba0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0003bbb0:· | 0003bbb0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003bbc0:· | 0003bbc0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0003bbd0:· | 0003bbd0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0003bbe0:· | 0003bbe0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0003bbf0:· | 0003bbf0:·643e·6869·6768·3c2f·7464·3e3c·2f74·723e··d>high</td></tr> | ||
| 0003bc00:·3 | 0003bc00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003bc10:· | 0003bc10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | ||
| 0003bc20:· | 0003bc20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | ||
| 0003bc30:· | 0003bc30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003bc40:·3 | 0003bc40:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003bc50:· | 0003bc50:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003bc60:· | 0003bc60:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003bc70:·4 | 0003bc70:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003bc80:· | 0003bc80:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003bc90:· | 0003bc90:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | ||
| 0003bca0:· | 0003bca0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | ||
| 0003bcb0:· | 0003bcb0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | ||
| 0003bcc0:· | 0003bcc0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | ||
| 0003bcd0:·206 | 0003bcd0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | ||
| 0003bce0:·2 | 0003bce0:·2d20·4343·452d·3839·3934·342d·330a·2020··-·CCE-89944-3.·· | ||
| 0003bcf0:· | 0003bcf0:·2d20·434a·4953·2d35·2e31·302e·342e·310a··-·CJIS-5.10.4.1. | ||
| 0003bd00:· | 0003bd00:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003bd10:· | 0003bd10:·2d33·2e33·2e38·0a20·202d·204e·4953·542d··-3.3.8.··-·NIST- | ||
| 0003bd20:· | 0003bd20:·3830·302d·3137·312d·332e·342e·310a·2020··800-171-3.4.1.·· | ||
| 0003bd30:· | 0003bd30:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | ||
| 0003bd40:· | 0003bd40:·2d39·2833·290a·2020·2d20·4e49·5354·2d38··-9(3).··-·NIST-8 | ||
| 0003bd50:· | 0003bd50:·3030·2d35·332d·434d·2d36·2863·290a·2020··00-53-CM-6(c).·· | ||
| 0003bd60:· | 0003bd60:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003bd70:· | 0003bd70:·2d36·2864·290a·2020·2d20·4e49·5354·2d38··-6(d).··-·NIST-8 | ||
| 0003bd80:·3 | 0003bd80:·3030·2d35·332d·5349·2d37·0a20·202d·204e··00-53-SI-7.··-·N | ||
| 0003bd90:· | 0003bd90:·4953·542d·3830·302d·3533·2d53·492d·3728··IST-800-53-SI-7( | ||
| 0003bda0:· | 0003bda0:·3129·0a20·202d·204e·4953·542d·3830·302d··1).··-·NIST-800- | ||
| 0003bdb0:· | 0003bdb0:·3533·2d53·492d·3728·3629·0a20·202d·2050··53-SI-7(6).··-·P | ||
| 0003bdc0:· | 0003bdc0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003bdd0:· | 0003bdd0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003bde0:·2e | 0003bde0:·2e35·2e32·0a20·202d·2068·6967·685f·636f··.5.2.··-·high_co | ||
| 0003bdf0:· | 0003bdf0:·6d70·6c65·7869·7479·0a20·202d·2068·6967··mplexity.··-·hig | ||
| 0003be00:· | 0003be00:·685f·7365·7665·7269·7479·0a20·202d·206d··h_severity.··-·m | ||
| 0003be10:·6 | 0003be10:·6564·6975·6d5f·6469·7372·7570·7469·6f6e··edium_disruption | ||
| 0003be20:· | 0003be20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003be30:·6 | 0003be30:·6565·6465·640a·2020·2d20·7265·7374·7269··eeded.··-·restri | ||
| 0003be40:·6 | 0003be40:·6374·5f73·7472·6174·6567·790a·2020·2d20··ct_strategy.··-· | ||
| 0003be50:·7 | 0003be50:·7270·6d5f·7665·7269·6679·5f68·6173·6865··rpm_verify_hashe | ||
| 0003be60:·73 | 0003be60:·730a·0a2d·206e·616d·653a·2027·5365·7420··s..-·name:·'Set· | ||
| Max diff block lines reached; 16562622/16618402 bytes (99.66%) of diff not shown. | |||
| Offset 15128, 281 lines modified | Offset 15128, 281 lines modified | ||
| 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b180:·3d22·2369·646d·3733·3037·2220·7461·6269··="#idm7307"·tabi | 0003b180:·3d22·2369·646d·3733·3037·2220·7461·6269··="#idm7307"·tabi | ||
| 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b1f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b200:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b210:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b220:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b230:·3d22·6964·6d37·3330·3722·3e3c·7461·626c··="idm7307"><tabl | |||
| 0003b240:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b250:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b260:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b270:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b280:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b290:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b2a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b | 0003b1f0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b200:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b210:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b220:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b230:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b240:·3330·3722·3e3c·7072·653e·3c63·6f64·653e··307"><pre><code> | |||
| 0003b250:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b260:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b270:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b280:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b290:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b2a0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b2b0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b2c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b2d0:·3733·3038·2220·7461·6269·6e64·6578·3d22··7308"·tabindex=" | |||
| 0003b2e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b2f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b300:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b310:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b320:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b330:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | |||
| 0003b380:·3038·223e·3c74·6162·6c65·2063·6c61·7373··08"><table·class | |||
| 0003b390:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b3a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b3b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b3c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b3d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b3e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b2d0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003b3f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b400:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b410:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b300:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b310:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b320:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b330:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b340:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b350:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b360:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b370:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b380:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b390:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b3a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b3b0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b3c0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b3d0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b3e0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b3f0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b400:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b410:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b420:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b430:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b440:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b450:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b460:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b470:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b480:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b490:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b4a0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b4b0:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b4c0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b4d0:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b4e0:·6167·733a·0a20·202d·2043·4345·2d39·3034··ags:.··-·CCE-904 | |||
| 0003b4f0:·3737·2d31·0a20·202d·2043·4a49·532d·352e··77-1.··-·CJIS-5. | |||
| 0003b500:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b510:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b520:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b530:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b540:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b550:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b560:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b570:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b580:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b590:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b5a0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b5b0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b5c0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b5d0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b5e0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b5f0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b600:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b610:·2d74·6172·6765·743d·2223·6964·6d37·3330··-target="#idm730 | |||
| 0003b620:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b630:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b640:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b650:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b660:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b670:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b680:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003b690:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b6a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b6b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b6c0:·6964·6d37·3330·3822·3e3c·7461·626c·6520··idm7308"><table· | |||
| 0003b6d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b6e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b6f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b700:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b710:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b720:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b730:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b | 0003b420:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b | 0003b430:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b440:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| Max diff block lines reached; 33564701/33602127 bytes (99.89%) of diff not shown. | |||
| Offset 15124, 280 lines modified | Offset 15124, 280 lines modified | ||
| 0003b130:·6574·3d22·2369·646d·3733·3037·2220·7461··et="#idm7307"·ta | 0003b130:·6574·3d22·2369·646d·3733·3037·2220·7461··et="#idm7307"·ta | ||
| 0003b140:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b140:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b150:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b150:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b160:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b160:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b170:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b170:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b180:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b180:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b190:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b190:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b1b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1e0:·6964·3d22·6964·6d37·3330·3722·3e3c·7461··id="idm7307"><ta | |||
| 0003b1f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b200:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b210:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b220:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b230:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b240:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b250:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b | 0003b1a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b1b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b1c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b1d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b1e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1f0:·6d37·3330·3722·3e3c·7072·653e·3c63·6f64··m7307"><pre><cod | |||
| 0003b200:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b210:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b220:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b230:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b240:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b250:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b260:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b270:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b280:·646d·3733·3038·2220·7461·6269·6e64·6578··dm7308"·tabindex | |||
| 0003b290:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b2b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b2c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b2d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b2e0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b2f0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b300:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b310:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b320:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b330:·3733·3038·223e·3c74·6162·6c65·2063·6c61··7308"><table·cla | |||
| 0003b340:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b350:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b360:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b370:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b380:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b390:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b280:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003b3a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b3b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b | 0003b3c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b3d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b2b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b2d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b2e0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b2f0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b300:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b310:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b320:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b330:·0a20·202d·2043·4345·2d39·3034·3737·2d31··.··-·CCE-90477-1 | |||
| 0003b340:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b350:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b360:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b370:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b380:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b390:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b3a0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b3b0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b3c0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b3d0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b3e0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b3f0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b400:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b410:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b420:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b430:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b440:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b450:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b460:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b470:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b480:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b490:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b4a0:·3034·3737·2d31·0a20·202d·2043·4a49·532d··0477-1.··-·CJIS- | |||
| 0003b4b0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 0003b4c0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b4d0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b4e0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b4f0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b500:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b510:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b520:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b530:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b540:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b550:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b560:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b570:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b580:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b590:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b5a0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b5b0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b5c0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b5d0:·3330·3822·2074·6162·696e·6465·783d·2230··308"·tabindex="0 | |||
| 0003b5e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b5f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b600:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b610:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b620:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b630:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003b640:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b650:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b660:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b670:·3d22·6964·6d37·3330·3822·3e3c·7461·626c··="idm7308"><tabl | |||
| 0003b680:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b690:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b6a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b6b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b6c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b6e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b6f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b | 0003b3e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| Max diff block lines reached; 33434447/33471735 bytes (99.89%) of diff not shown. | |||
| Offset 15247, 284 lines modified | Offset 15247, 284 lines modified | ||
| 0003b8e0:·6765·743d·2223·6964·6d37·3939·3022·2074··get="#idm7990"·t | 0003b8e0:·6765·743d·2223·6964·6d37·3939·3022·2074··get="#idm7990"·t | ||
| 0003b8f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b8f0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b900:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b900:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b910:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b910:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b920:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b920:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b930:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b930:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b940:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b940:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b950:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b960:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b970:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b980:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b9 | 0003b950:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b960:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b970:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b980:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b990:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b9a0:·646d·3739·3930·223e·3c70·7265·3e3c·636f··dm7990"><pre><co | |||
| 0003b9b0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b9c0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b9d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b9e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b9 | 0003b9f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b9b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b9c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b9d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b9e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b9f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ba00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ba | 0003ba00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003ba10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ba20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ba30:·6964·6d37·3939·3122·2074·6162·696e·6465··idm7991"·tabinde | |||
| 0003ba40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ba50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ba60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ba70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ba80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003ba90:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003baa0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003bab0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bac0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bad0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bae0:·6d37·3939·3122·3e3c·7461·626c·6520·636c··m7991"><table·cl | |||
| 0003baf0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bb00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bb10:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bb20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bb30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003bb40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003ba30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003bb50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003bb60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003bb70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bb80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bb90:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bba0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bbb0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003ba60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ba70:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003ba80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003ba90:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003baa0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003bab0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003bac0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003bad0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003bae0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003baf0:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bb00:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bb10:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bb20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bb30:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bb40:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bb50:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bb60:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bb70:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bb80:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bb90:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bba0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bbb0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bbc0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bbd0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bbe0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003bbf0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bc00:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bc10:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bc20:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003bc30:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003bc40:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003bc50:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003bc60:·6167·733a·0a20·202d·2043·4345·2d38·3038··ags:.··-·CCE-808 | |||
| 0003bc70:·3434·2d34·0a20·202d·2043·4a49·532d·352e··44-4.··-·CJIS-5. | |||
| 0003bc80:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003bc90:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003bca0:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003bcb0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bcc0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bcd0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bce0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bcf0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bd00:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bd10:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bd20:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bd30:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bd40:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bd50:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bd60:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003bd70:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bd80:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bd90:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bda0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bdb0:·7267·6574·3d22·2369·646d·3739·3931·2220··rget="#idm7991"· | |||
| 0003bdc0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bdd0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bde0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bdf0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003be00:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003be10:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003be20:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003be30:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003be40:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003be50:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003be60:·3739·3931·223e·3c74·6162·6c65·2063·6c61··7991"><table·cla | |||
| 0003be70:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003be80:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003be90:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bea0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003beb0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| Max diff block lines reached; 23004265/23042105 bytes (99.84%) of diff not shown. | |||
| Offset 15252, 284 lines modified | Offset 15252, 284 lines modified | ||
| 0003b930:·7461·7267·6574·3d22·2369·646d·3739·3930··target="#idm7990 | 0003b930:·7461·7267·6574·3d22·2369·646d·3739·3930··target="#idm7990 | ||
| 0003b940:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b940:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b950:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b950:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b960:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b960:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b970:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b970:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b980:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b980:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b990:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b990:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b9a0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b9b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b9c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b9 | 0003b9a0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b9b0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b9c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b9d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b9e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9f0:·3d22·6964·6d37·3939·3022·3e3c·7072·653e··="idm7990"><pre> | |||
| 0003ba00:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ba10:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ba20:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ba30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b | 0003ba40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003ba00:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ba10:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ba20:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ba30:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ba40:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ba50:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ba | 0003ba50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003ba60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba80:·3d22·2369·646d·3739·3931·2220·7461·6269··="#idm7991"·tabi | |||
| 0003ba90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003baa0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bab0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bac0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bad0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bae0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003baf0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003bb00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bb10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bb20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bb30:·2269·646d·3739·3931·223e·3c74·6162·6c65··"idm7991"><table | |||
| 0003bb40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bb50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bb60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bb70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bb80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003bb90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003bba0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b | 0003bbb0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | ||
| 0003b | 0003bbc0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b | 0003bbd0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | ||
| 0003b | 0003bbe0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | ||
| 0003bbf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003bc00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bc10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bc20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bc30:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003bc40:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003bc50:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003bc60:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003bc70:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003bc80:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003bc90:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003bad0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bae0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003baf0:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0003bb00:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0003bb10:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | |||
| 0003bb20:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | |||
| 0003bb30:·6167·733a·0a20·202d·2043·4345·2d38·3038··ags:.··-·CCE-808 | |||
| 0003bb40:·3434·2d34·0a20·202d·2043·4a49·532d·352e··44-4.··-·CJIS-5. | |||
| 0003bb50:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003bb60:·5354·4947·2d52·4845·4c2d·3038·2d30·3130··STIG-RHEL-08-010 | |||
| 0003bb70:·3335·390a·2020·2d20·4e49·5354·2d38·3030··359.··-·NIST-800 | |||
| 0003bb80:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003bb90:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003bba0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003bbb0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003bbc0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003bbd0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003bbe0:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003bbf0:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003bc00:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003bc10:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003bc20:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003bc30:·6c65·640a·0a2d·206e·616d·653a·2045·6e73··led..-·name:·Ens | |||
| 0003bc40:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003bc50:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003bc60:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003bc70:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003bc80:·6e74·0a20·2077·6865·6e3a·2027·226b·6572··nt.··when:·'"ker | |||
| 0003bc90:·6e65·6c22·2069·6e20·616e·7369·626c·655f··nel"·in·ansible_ | |||
| 0003bca0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003bcb0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003bcc0:·3830·3834·342d·340a·2020·2d20·434a·4953··80844-4.··-·CJIS | |||
| 0003bcd0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003bce0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003bcf0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003bd00:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003bd10:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003bd20:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003bd30:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003bd40:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003bd50:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003bd60:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003bd70:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003bd80:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003bd90:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003bda0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003bdb0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b | 0003bca0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003b | 0003bcb0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003b | 0003bcc0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b | 0003bcd0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003b | 0003bce0:·6172·6765·743d·2223·6964·6d37·3939·3222··arget="#idm7992" | ||
| 0003b | 0003bcf0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bd00:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bd10:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bd20:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bd30:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd40:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd50:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003bd60:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd70:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd80:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| Max diff block lines reached; 23299440/23337280 bytes (99.84%) of diff not shown. | |||
| Offset 15242, 285 lines modified | Offset 15242, 285 lines modified | ||
| 0003b890:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b890:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b8a0:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | 0003b8a0:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | ||
| 0003b8b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b8b0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b8c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b8c0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b8d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b8d0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b8e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b8e0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b8f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b8f0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b900:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b900:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b910:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b920:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b930:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b940:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b950:·3d22·6964·6d37·3939·3022·3e3c·7461·626c··="idm7990"><tabl | |||
| 0003b960:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b970:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b980:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b990:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b9a0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b9b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b9 | 0003b910:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b920:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b930:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b940:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b950:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b960:·3939·3022·3e3c·7072·653e·3c63·6f64·653e··990"><pre><code> | |||
| 0003b970:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b980:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b990:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b9a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b9b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b9c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b9d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b9e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b9f0:·3739·3931·2220·7461·6269·6e64·6578·3d22··7991"·tabindex=" | |||
| 0003ba00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ba10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ba20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ba30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ba40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ba50:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003ba60:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba90:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003baa0:·3931·223e·3c74·6162·6c65·2063·6c61·7373··91"><table·class | |||
| 0003bab0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bac0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bad0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bae0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003baf0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003bb00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b9f0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003bb10:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bb20:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003bb30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003bb40:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bb50:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bb60:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bb70:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bb80:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bb90:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003ba30:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ba40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba50:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003ba60:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003ba70:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003ba80:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003ba90:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003baa0:·202d·2043·4345·2d38·3038·3434·2d34·0a20···-·CCE-80844-4.· | |||
| 0003bab0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003bac0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003bad0:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003bae0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003baf0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bb00:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bb10:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bb20:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bb30:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bb40:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bb50:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bb60:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bb70:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bb80:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bb90:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bba0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bbb0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bbc0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bbd0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bbe0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bbf0:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bc00:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bc10:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bc20:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bc30:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bc40:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bc50:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bc60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bc70:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bc80:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bc90:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bca0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bcb0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bcc0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bcd0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bce0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bcf0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bd00:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bd10:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bd20:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bd30:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bd40:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bd50:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bd60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bd70:·743d·2223·6964·6d37·3939·3122·2074·6162··t="#idm7991"·tab | |||
| 0003bd80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bd90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bda0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bdb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bdc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bdd0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bde0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bdf0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003be00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003be10:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003be20:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003be30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| Max diff block lines reached; 9944788/9982766 bytes (99.62%) of diff not shown. | |||
| Offset 131, 14 lines modified | Offset 131, 60 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 159 | if·rpm·--quiet·-q·kernel;·then | ||
| 160 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 161 | ····yum·install·-y·"aide" | ||
| 162 | fi | ||
| 163 | else | ||
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 165 | fi | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·--add=aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | dnf·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Gather·the·package·facts | 183 | -·name:·Gather·the·package·facts |
| 144 | ··package_facts: | 184 | ··package_facts: |
| Offset 178, 60 lines modified | Offset 224, 14 lines modified | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 224 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 225 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 226 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 227 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 228 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | package·install·aide | 229 | package·install·aide |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | [[packages]] | ||
| 186 | name·=·"aide" | ||
| 187 | version·=·"*" | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 194 | if·rpm·--quiet·-q·kernel;·then | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 196 | ····yum·install·-y·"aide" | ||
| 197 | fi | ||
| 198 | else | ||
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 200 | fi | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | dnf·install·aide | ||
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 212 | include·install_aide | ||
| 213 | class·install_aide·{ | ||
| 214 | ··package·{·'aide': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | } | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 223 | package·--add=aide | ||
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 230 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | Run·the·following·command·to·generate·a·new·database: | 231 | Run·the·following·command·to·generate·a·new·database: |
| 226 | $·sudo·/usr/sbin/aide·--init | 232 | $·sudo·/usr/sbin/aide·--init |
| 227 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 233 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 228 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 234 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 229 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 235 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 230 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 236 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 259, 14 lines modified | Offset 259, 28 lines modified | ||
| 259 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 259 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 260 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 260 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 261 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 261 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 262 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 262 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 263 | ·············_\x8c_\x8i_\x8s············5.3.1 | 263 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1123650/1128443 bytes (99.58%) of diff not shown. | |||
| Offset 14908, 205 lines modified | Offset 14908, 205 lines modified | ||
| 0003a3b0:·7461·7267·6574·3d22·2369·646d·3133·3432··target="#idm1342 | 0003a3b0:·7461·7267·6574·3d22·2369·646d·3133·3432··target="#idm1342 | ||
| 0003a3c0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 0003a3c0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 0003a3d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003a3d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003a3e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003a3e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003a3f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003a3f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003a400:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003a400:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003a410:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003a410:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003a420:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003a430:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003a440:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a450:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a460:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a470:·643d·2269·646d·3133·3432·3122·3e3c·7072··d="idm13421"><pr | |||
| 0003a480:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003a490:·6765·735d·5d0a·6e61·6d65·203d·2022·646e··ges]].name·=·"dn | |||
| 0003a420:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003a430:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003a440:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003a450:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003a460:·7073·6522·2069·643d·2269·646d·3133·3432··pse"·id="idm1342 | |||
| 0003a470:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003a480:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a490:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a4a0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003a4b0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a4c0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a4d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a4e0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a4f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a500:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003a510:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003a520:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a530:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003a540:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003a550:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003a560:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003a570:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003a580:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003a590:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003a5a0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003a5b0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003a5c0:·3239·3835·2d33·0a20·202d·2065·6e61·626c··2985-3.··-·enabl | |||
| 0003a5d0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003a5e0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003a5f0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003a600:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003a610:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003a620:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003a630:·636b·6167·655f·646e·662d·6175·746f·6d61··ckage_dnf-automa | |||
| 0003a640:·7469·635f·696e·7374·616c·6c65·640a·0a2d··tic_installed..- | |||
| 0003a650:·206e·616d·653a·2045·6e73·7572·6520·646e···name:·Ensure·dn | |||
| 0003a | 0003a4a0:·662d·6175·746f·6d61·7469·6322·0a76·6572··f-automatic".ver | ||
| 0003a4b0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003a670:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003a680:·6765·3a0a·2020·2020·6e61·6d65·3a20·646e··ge:.····name:·dn | |||
| 0003a690:·662d·6175·746f·6d61·7469·630a·2020·2020··f-automatic.···· | |||
| 0003a6a0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003a6b0:·2077·6865·6e3a·206e·6f74·2028·2022·6b65···when:·not·(·"ke | |||
| 0003a6c0:·726e·656c·2220·696e·2061·6e73·6962·6c65··rnel"·in·ansible | |||
| 0003a6d0:·5f66·6163·7473·2e70·6163·6b61·6765·7320··_facts.packages· | |||
| 0003a6e0:·616e·6420·2272·706d·2d6f·7374·7265·6522··and·"rpm-ostree" | |||
| 0003a6f0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003a700:·732e·7061·636b·6167·6573·0a20·2020·2061··s.packages.····a | |||
| 0003a710:·6e64·2022·626f·6f74·6322·2069·6e20·616e··nd·"bootc"·in·an | |||
| 0003a720:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003a730:·6167·6573·2061·6e64·206e·6f74·2022·6f70··ages·and·not·"op | |||
| 0003a740:·656e·7368·6966·742d·6b75·6265·6c65·7422··enshift-kubelet" | |||
| 0003a750:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003a760:·732e·7061·636b·6167·6573·0a20·2020·2029··s.packages.····) | |||
| 0003a770:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003a780:·2d38·3239·3835·2d33·0a20·202d·2065·6e61··-82985-3.··-·ena | |||
| 0003a790:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003a7a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003a7b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003a7c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003a7d0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003a7e0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003a7f0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 0003a800:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 0003a810:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003a820:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003a830:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003a840:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003a850:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003a860:·3d22·2369·646d·3133·3432·3222·2074·6162··="#idm13422"·tab | |||
| 0003a870:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003a880:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003a890:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003a8a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003a8b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003a8c0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003a8d0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003a8e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a8f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a900:·6170·7365·2220·6964·3d22·6964·6d31·3334··apse"·id="idm134 | |||
| 0003a910:·3232·223e·3c74·6162·6c65·2063·6c61·7373··22"><table·class | |||
| 0003a920:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003a930:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003a940:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003a950:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003a960:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003a970:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003a980:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003a990:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003a9a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a9b0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003a9c0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003a9d0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003a9e0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003a9f0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003aa00:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003aa10:·6b61·6765·2069·6e73·7461·6c6c·2064·6e66··kage·install·dnf | |||
| 0003aa20:·2d61·7574·6f6d·6174·6963·0a3c·2f63·6f64··-automatic.</cod | |||
| 0003a | 0003a4c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003a | 0003a4d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003a | 0003a4e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003a | 0003a4f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003a | 0003a500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003a | 0003a510:·6d31·3334·3232·2220·7461·6269·6e64·6578··m13422"·tabindex | ||
| 0003a | 0003a520:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003a | 0003a530:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003a | 0003a540:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003a | 0003a550:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003a | 0003a560:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003a | 0003a570:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | ||
| 0003a580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| Max diff block lines reached; 3408660/3435046 bytes (99.23%) of diff not shown. | |||
| Offset 95, 14 lines modified | Offset 95, 61 lines modified | ||
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 99 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 100 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 100 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 101 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 101 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 103 | [[packages]] | ||
| 104 | name·=·"dnf-automatic" | ||
| 105 | version·=·"*" | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | include·install_dnf-automatic | ||
| 112 | class·install_dnf-automatic·{ | ||
| 113 | ··package·{·'dnf-automatic': | ||
| 114 | ····ensure·=>·'installed', | ||
| 115 | ··} | ||
| 116 | } | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 123 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 124 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 125 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 126 | ····yum·install·-y·"dnf-automatic" | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=dnf-automatic | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | dnf·install·dnf-automatic | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 107 | -·name:·Gather·the·package·facts | 148 | -·name:·Gather·the·package·facts |
| 108 | ··package_facts: | 149 | ··package_facts: |
| Offset 135, 61 lines modified | Offset 182, 14 lines modified | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | package·install·dnf-automatic | 187 | package·install·dnf-automatic |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"dnf-automatic" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 151 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 152 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 153 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 154 | ····yum·install·-y·"dnf-automatic" | ||
| 155 | fi | ||
| 156 | else | ||
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 158 | fi | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | dnf·install·dnf-automatic | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_dnf-automatic | ||
| 171 | class·install_dnf-automatic·{ | ||
| 172 | ··package·{·'dnf-automatic': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·--add=dnf-automatic | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 189 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 184 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 190 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 185 | automatic.conf. | 191 | automatic.conf. |
| 186 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 192 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 187 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 193 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 188 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 194 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 200, 14 lines modified | Offset 200, 56 lines modified | ||
| 200 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 200 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 201 | Identifiers:·CCE-82494-6 | 201 | Identifiers:·CCE-82494-6 |
| 202 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 202 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| Max diff block lines reached; 243213/248403 bytes (97.91%) of diff not shown. | |||
| Offset 15299, 285 lines modified | Offset 15299, 285 lines modified | ||
| 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003bc20:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003bc30:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | 0003bc30:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | ||
| 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003bc40:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003bc50:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003bc60:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003bc70:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003bc80:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003bc90:·3e52·656d·6564·6961·7469·6f6e·204 | 0003bc90:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003bca0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003bcb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bcc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bcd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bce0:·2269·646d·3739·3930·223e·3c74·6162·6c65··"idm7990"><table | |||
| 0003bcf0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bd00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bd10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bd20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bd50:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b | 0003bca0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003bcb0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bcc0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bcd0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bce0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bcf0:·3930·223e·3c70·7265·3e3c·636f·6465·3e0a··90"><pre><code>. | |||
| 0003bd00:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003bd10:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003bd20:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003bd30:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bd40:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bd50:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bd60:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bd70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bd80:·3939·3122·2074·6162·696e·6465·783d·2230··991"·tabindex="0 | |||
| 0003bd90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bda0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bdb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bdc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bdd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bde0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003bdf0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003be00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003be10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003be20:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003be30:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003be40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003be50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003be60:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003be70:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003be80:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003be90:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bd80:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003bea0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003beb0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b | 0003bec0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003bed0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bee0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bef0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bf00:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bf10:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bf20:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003bdc0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bdd0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bde0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003bdf0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003be00:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003be10:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003be20:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003be30:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003be40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003be50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003be60:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003be70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003be80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003be90:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bea0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003beb0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bec0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bed0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bee0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bef0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bf00:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bf10:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bf20:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003bf30:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bf40:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bf50:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bf60:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bf70:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bf80:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bf90:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bfa0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bfb0:·0a20·202d·2043·4345·2d38·3038·3434·2d34··.··-·CCE-80844-4 | |||
| 0003bfc0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bfd0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bfe0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003c070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003c080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003c090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003c0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003c0b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003c0c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003c0d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003c0e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003c0f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003c100:·3d22·2369·646d·3739·3931·2220·7461·6269··="#idm7991"·tabi | |||
| 0003c110:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003c120:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003c130:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003c140:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003c150:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003c160:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003c170:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003c180:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003c190:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003c1a0:·7073·6522·2069·643d·2269·646d·3739·3931··pse"·id="idm7991 | |||
| 0003c1b0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003c1c0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| Max diff block lines reached; 26334481/26372459 bytes (99.86%) of diff not shown. | |||
| Offset 15261, 284 lines modified | Offset 15261, 284 lines modified | ||
| 0003b9c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b9c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b9d0:·3739·3930·2220·7461·6269·6e64·6578·3d22··7990"·tabindex=" | 0003b9d0:·3739·3930·2220·7461·6269·6e64·6578·3d22··7990"·tabindex=" | ||
| 0003b9e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b9e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b9f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b9f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ba00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ba00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ba10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ba10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ba20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ba20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ba30:·6469·6174·696f·6e20·4 | 0003ba30:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003ba40:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ba50:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ba60:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ba70:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ba80:·3939·3022·3e3c·7461·626c·6520·636c·6173··990"><table·clas | |||
| 0003ba90:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003baa0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bab0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bac0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bad0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bae0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ba | 0003ba40:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003ba50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ba60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ba70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ba80:·2220·6964·3d22·6964·6d37·3939·3022·3e3c··"·id="idm7990">< | |||
| 0003ba90:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003baa0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003bab0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003bac0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003bad0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bae0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003baf0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bb00:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bb10:·7267·6574·3d22·2369·646d·3739·3931·2220··rget="#idm7991"· | |||
| 0003bb20:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bb30:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bb40:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bb50:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bb60:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bb70:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bb80:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003bb90:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bba0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bbb0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bbc0:·2069·643d·2269·646d·3739·3931·223e·3c74···id="idm7991"><t | |||
| 0003bbd0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bbe0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bbf0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bc00:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bc10:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003bc20:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003bc30:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bb20:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bb30:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b | 0003bc40:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bc50:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bc60:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003bc70:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bc80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003bc90:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003bca0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003bcb0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003bcc0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003bb60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bb70:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bb80:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003bb90:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003bba0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003bbb0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003bbc0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003bbd0:·2d38·3038·3434·2d34·0a20·202d·2043·4a49··-80844-4.··-·CJI | |||
| 0003bbe0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003bbf0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003bc00:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003bc10:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bc20:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bc30:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bc40:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bc50:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bc60:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bc70:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003bc80:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003bc90:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003bca0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003bcb0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003bcc0:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003bcd0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bce0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003bcf0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bd00:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bd10:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003bd20:·226b·6572·6e65·6c22·2069·6e20·616e·7369··"kernel"·in·ansi | |||
| 0003bd30:·626c·655f·6661·6374·732e·7061·636b·6167··ble_facts.packag | |||
| 0003bd40:·6573·270a·2020·7461·6773·3a0a·2020·2d20··es'.··tags:.··-· | |||
| 0003bd50:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bd60:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bd70:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bd80:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bd90:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bda0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bdb0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bdc0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bdd0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003bde0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003bdf0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003be00:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003be10:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003be20:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003be30:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003be40:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003be50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003be60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003be70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003be80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003be90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003bea0:·6d37·3939·3122·2074·6162·696e·6465·783d··m7991"·tabindex= | |||
| 0003beb0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003bec0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003bed0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003bee0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003bef0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003bf00:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003bf10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bf20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bf30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bf40:·6964·3d22·6964·6d37·3939·3122·3e3c·7461··id="idm7991"><ta | |||
| 0003bf50:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bf60:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| Max diff block lines reached; 11643391/11681231 bytes (99.68%) of diff not shown. | |||
| Offset 117, 14 lines modified | Offset 117, 60 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | include·install_aide | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | } | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·rpm·--quiet·-q·kernel;·then | ||
| 146 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 147 | ····yum·install·-y·"aide" | ||
| 148 | fi | ||
| 149 | else | ||
| 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 151 | fi | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·--add=aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | dnf·install·aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Gather·the·package·facts | 169 | -·name:·Gather·the·package·facts |
| 130 | ··package_facts: | 170 | ··package_facts: |
| Offset 164, 60 lines modified | Offset 210, 14 lines modified | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 210 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 211 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 212 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 213 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 214 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | package·install·aide | 215 | package·install·aide |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·rpm·--quiet·-q·kernel;·then | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 182 | ····yum·install·-y·"aide" | ||
| 183 | fi | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | dnf·install·aide | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | include·install_aide | ||
| 199 | class·install_aide·{ | ||
| 200 | ··package·{·'aide': | ||
| 201 | ····ensure·=>·'installed', | ||
| 202 | ··} | ||
| 203 | } | ||
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 209 | package·--add=aide | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 217 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 218 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 219 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 220 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 215 | To·initiate·a·manual·check,·run·the·following·command: | 221 | To·initiate·a·manual·check,·run·the·following·command: |
| 216 | $·sudo·/usr/sbin/aide·--check | 222 | $·sudo·/usr/sbin/aide·--check |
| Offset 238, 14 lines modified | Offset 238, 28 lines modified | ||
| 238 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 238 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 239 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 239 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 241 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 241 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 242 | ·············_\x8c_\x8i_\x8s············5.3.1 | 242 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1358605/1363547 bytes (99.64%) of diff not shown. | |||
| Offset 15252, 285 lines modified | Offset 15252, 285 lines modified | ||
| 0003b930:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b930:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b940:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | 0003b940:·3d22·2369·646d·3739·3930·2220·7461·6269··="#idm7990"·tabi | ||
| 0003b950:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b950:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b960:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b960:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b970:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b970:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b980:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b980:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b990:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b990:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b9a0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b9a0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b9b0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b9c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b9d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b9e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b9f0:·3d22·6964·6d37·3939·3022·3e3c·7461·626c··="idm7990"><tabl | |||
| 0003ba00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ba10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ba20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ba30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ba40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ba50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ba60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b | 0003b9b0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b9c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b9d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b9e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b9f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003ba00:·3939·3022·3e3c·7072·653e·3c63·6f64·653e··990"><pre><code> | |||
| 0003ba10:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ba20:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003ba30:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003ba40:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ba50:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003ba60:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ba70:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ba80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ba90:·3739·3931·2220·7461·6269·6e64·6578·3d22··7991"·tabindex=" | |||
| 0003baa0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bab0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bac0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bad0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bae0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003baf0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003bb00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bb10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bb20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bb30:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bb40:·3931·223e·3c74·6162·6c65·2063·6c61·7373··91"><table·class | |||
| 0003bb50:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bb60:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bb70:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bb80:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bb90:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003bba0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003ba90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003bbb0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003bbc0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003bbd0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003bbe0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003bbf0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bc00:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bc10:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bc20:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bc30:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003bc40:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003bc50:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003bc60:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003bc70:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003bc80:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003bc90:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003bad0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bae0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003baf0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003bb00:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003bb10:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003bb20:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003bb30:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003bb40:·202d·2043·4345·2d38·3038·3434·2d34·0a20···-·CCE-80844-4.· | |||
| 0003bb50:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003bb60:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003bb70:·4845·4c2d·3038·2d30·3130·3335·390a·2020··HEL-08-010359.·· | |||
| 0003bb80:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003bb90:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003bba0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003bbb0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003bbc0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003bbd0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003bbe0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003bbf0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003bc00:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003bc10:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003bc20:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003bc30:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003bc40:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bc50:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bc60:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bc70:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bc80:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bc90:·6865·6e3a·2027·226b·6572·6e65·6c22·2069··hen:·'"kernel"·i | |||
| 0003bca0:·6e20·616e·7369·626c·655f·6661·6374·732e··n·ansible_facts. | |||
| 0003bcb0:·7061·636b·6167·6573·270a·2020·7461·6773··packages'.··tags | |||
| 0003bcc0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bcd0:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bce0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bcf0:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003bd00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003bd10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bd20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bd30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bd40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bd50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bd60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bd70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bd80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bd90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bda0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bdb0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b | 0003bca0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0003b | 0003bcb0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0003b | 0003bcc0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0003bcd0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bce0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bcf0:·2223·6964·6d37·3939·3222·2074·6162·696e··"#idm7992"·tabin | |||
| 0003bd00:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bd10:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bd20:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bd30:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bd40:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bd50:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| Max diff block lines reached; 11332504/11370482 bytes (99.67%) of diff not shown. | |||
| Offset 116, 14 lines modified | Offset 116, 60 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | include·install_aide | ||
| 133 | class·install_aide·{ | ||
| 134 | ··package·{·'aide': | ||
| 135 | ····ensure·=>·'installed', | ||
| 136 | ··} | ||
| 137 | } | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·rpm·--quiet·-q·kernel;·then | ||
| 145 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 146 | ····yum·install·-y·"aide" | ||
| 147 | fi | ||
| 148 | else | ||
| 149 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 150 | fi | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·--add=aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | dnf·install·aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Gather·the·package·facts | 168 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 169 | ··package_facts: |
| Offset 163, 60 lines modified | Offset 209, 14 lines modified | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | package·install·aide | 214 | package·install·aide |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel;·then | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 181 | ····yum·install·-y·"aide" | ||
| 182 | fi | ||
| 183 | else | ||
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 185 | fi | ||
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 191 | dnf·install·aide | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 204 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 205 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 206 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 207 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 208 | package·--add=aide | ||
| 209 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 210 | Run·the·following·command·to·generate·a·new·database: | 216 | Run·the·following·command·to·generate·a·new·database: |
| 211 | $·sudo·/usr/sbin/aide·--init | 217 | $·sudo·/usr/sbin/aide·--init |
| 212 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 218 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 213 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 219 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 214 | To·initiate·a·manual·check,·run·the·following·command: | 220 | To·initiate·a·manual·check,·run·the·following·command: |
| 215 | $·sudo·/usr/sbin/aide·--check | 221 | $·sudo·/usr/sbin/aide·--check |
| Offset 237, 14 lines modified | Offset 237, 28 lines modified | ||
| 237 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 237 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 238 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 238 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 239 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 239 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 240 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 240 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 241 | ·············_\x8c_\x8i_\x8s············5.3.1 | 241 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| Max diff block lines reached; 1319184/1324126 bytes (99.63%) of diff not shown. | |||
| Offset 15291, 284 lines modified | Offset 15291, 284 lines modified | ||
| 0003bba0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bba0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bbb0:·3939·3022·2074·6162·696e·6465·783d·2230··990"·tabindex="0 | 0003bbb0:·3939·3022·2074·6162·696e·6465·783d·2230··990"·tabindex="0 | ||
| 0003bbc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bbc0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bbd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bbd0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bbe0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bbe0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bbf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bbf0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003bc00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bc00:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bc10:·6961·7469·6f6e·204 | 0003bc10:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003bc20:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003bc30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bc40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bc50:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003bc60:·3930·223e·3c74·6162·6c65·2063·6c61·7373··90"><table·class | |||
| 0003bc70:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bc80:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bc90:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bca0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003bcb0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003bcc0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bc | 0003bc20:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003bc30:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bc40:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bc50:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bc60:·2069·643d·2269·646d·3739·3930·223e·3c70···id="idm7990"><p | |||
| 0003bc70:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003bc80:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003bc90:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003bca0:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003bcb0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bcc0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bcd0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bce0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bcf0:·6765·743d·2223·6964·6d37·3939·3122·2074··get="#idm7991"·t | |||
| 0003bd00:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bd10:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bd20:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bd30:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bd40:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bd50:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bd60:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003bd70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bda0:·6964·3d22·6964·6d37·3939·3122·3e3c·7461··id="idm7991"><ta | |||
| 0003bdb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bdc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bdd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bde0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bdf0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003be00:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003be10:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bd00:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bd10:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b | 0003be20:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003be30:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003be40:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003be50:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0003bd40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd50:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bd60:·6d65·3a20·4761·7468·6572·2074·6865·2070··me:·Gather·the·p | |||
| 0003bd70:·6163·6b61·6765·2066·6163·7473·0a20·2070··ackage·facts.··p | |||
| 0003bd80:·6163·6b61·6765·5f66·6163·7473·3a0a·2020··ackage_facts:.·· | |||
| 0003bd90:·2020·6d61·6e61·6765·723a·2061·7574·6f0a····manager:·auto. | |||
| 0003bda0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003bdb0:·3830·3834·342d·340a·2020·2d20·434a·4953··80844-4.··-·CJIS | |||
| 0003bdc0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003bdd0:·5341·2d53·5449·472d·5248·454c·2d30·382d··SA-STIG-RHEL-08- | |||
| 0003bde0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003bdf0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003be00:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003be10:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003be20:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003be30:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003be40:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003be50:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003be60:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003be70:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003be80:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003be90:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003bea0:·7461·6c6c·6564·0a0a·2d20·6e61·6d65·3a20··talled..-·name:· | |||
| 0003beb0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003bec0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003bed0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003bee0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003bef0:·6573·656e·740a·2020·7768·656e·3a20·2722··esent.··when:·'" | |||
| 0003bf00:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003bf10:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003bf20:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003bf30:·4345·2d38·3038·3434·2d34·0a20·202d·2043··CE-80844-4.··-·C | |||
| 0003bf40:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bf50:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bf60:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003bf70:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bf80:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003bf90:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003bfa0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003bfb0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003bfc0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003bfd0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003bfe0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003bff0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c000:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c010:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003 | 0003be60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003be70:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003be80:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003be90:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003bea0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003beb0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003bec0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003bed0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003bee0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003bef0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003bf00:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003bf10:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bf20:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bf30:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bf40:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bf50:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bf60:·3932·2220·7461·6269·6e64·6578·3d22·3022··92"·tabindex="0" | |||
| 0003bf70:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bf80:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bf90:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bfa0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bfb0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bfc0:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003bfd0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| Max diff block lines reached; 26124681/26162521 bytes (99.86%) of diff not shown. | |||
| Offset 15283, 284 lines modified | Offset 15283, 284 lines modified | ||
| 0003bb20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bb20:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bb30:·6d37·3939·3022·2074·6162·696e·6465·783d··m7990"·tabindex= | 0003bb30:·6d37·3939·3022·2074·6162·696e·6465·783d··m7990"·tabindex= | ||
| 0003bb40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bb40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bb50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bb50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bb60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bb60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bb70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bb70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bb80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bb80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bb90:·6564·6961·7469·6f6e·204 | 0003bb90:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003bba0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bbb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bbc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bbd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bbe0:·3739·3930·223e·3c74·6162·6c65·2063·6c61··7990"><table·cla | |||
| 0003bbf0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bc00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bc10:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bc20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bc30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003bc40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003bba0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003bbb0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bbc0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bbd0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bbe0:·6522·2069·643d·2269·646d·3739·3930·223e··e"·id="idm7990"> | |||
| 0003bbf0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003bc00:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003bc10:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bc20:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003bc30:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bc40:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bc50:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bc60:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bc70:·6172·6765·743d·2223·6964·6d37·3939·3122··arget="#idm7991" | |||
| 0003bc80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bc90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bca0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bcb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bcc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bcd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bce0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003bcf0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bd00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bd10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bd20:·2220·6964·3d22·6964·6d37·3939·3122·3e3c··"·id="idm7991">< | |||
| 0003bd30:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bd40:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bd50:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bd60:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bd70:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003bd80:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003bd90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bc80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bc90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b | 0003bda0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003bdb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bdc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b | 0003bdd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bde0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bdf0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003be00:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003be10:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003be20:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0003be30:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 0003be40:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 0003be50:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 0003be60:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 0003be70:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0003be80:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0003bcc0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bcd0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bce0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003bcf0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003bd00:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003bd10:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003bd20:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003bd30:·452d·3830·3834·342d·340a·2020·2d20·434a··E-80844-4.··-·CJ | |||
| 0003bd40:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003bd50:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003bd60:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003bd70:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003bd80:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003bd90:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003bda0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003bdb0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003bdc0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003bdd0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003bde0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003bdf0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003be00:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003be10:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003be20:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003be30:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003be40:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003be50:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003be60:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003be70:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003be80:·2722·6b65·726e·656c·2220·696e·2061·6e73··'"kernel"·in·ans | |||
| 0003be90:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003bea0:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003beb0:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003bec0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bed0:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bee0:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bef0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bf00:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bf10:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003bf20:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003bf30:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003bf40:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003bf50:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003bf60:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003bf70:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003bf80:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003bf90:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003bfa0:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003be90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003b | 0003bea0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003b | 0003beb0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003b | 0003bec0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b | 0003bed0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003 | 0003bee0:·3739·3932·2220·7461·6269·6e64·6578·3d22··7992"·tabindex=" | ||
| 0003 | 0003bef0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003 | 0003bf00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003 | 0003bf10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003 | 0003bf20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003 | 0003bf30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003c060:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| Max diff block lines reached; 10102189/10140029 bytes (99.63%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 60 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel;·then | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 152 | ····yum·install·-y·"aide" | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·--add=aide | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | dnf·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 174 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 175 | ··package_facts: |
| Offset 169, 60 lines modified | Offset 215, 14 lines modified | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | package·install·aide | 220 | package·install·aide |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 185 | if·rpm·--quiet·-q·kernel;·then | ||
| 186 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 187 | ····yum·install·-y·"aide" | ||
| 188 | fi | ||
| 189 | else | ||
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 191 | fi | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | dnf·install·aide | ||
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 203 | include·install_aide | ||
| 204 | class·install_aide·{ | ||
| 205 | ··package·{·'aide': | ||
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | } | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 214 | package·--add=aide | ||
| 215 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 221 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 216 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 222 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 217 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 223 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 218 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 224 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 219 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 290, 90 lines modified | Offset 290, 110 lines modified | ||
| 290 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 290 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 291 | Severity: ···medium | 291 | Severity: ···medium |
| 292 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 292 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 293 | Identifiers:·CCE-82723-8 | 293 | Identifiers:·CCE-82723-8 |
| 294 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 294 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1329196/1334847 bytes (99.58%) of diff not shown. | |||
| Offset 15318, 414 lines modified | Offset 15318, 414 lines modified | ||
| 0003bd50:·7267·6574·3d22·2369·646d·3736·3437·2220··rget="#idm7647"· | 0003bd50:·7267·6574·3d22·2369·646d·3736·3437·2220··rget="#idm7647"· | ||
| 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bd60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bd70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bd80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bd90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bda0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bdb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bdc0:·6e20· | 0003bdc0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0003bdd0:· | 0003bdd0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003bde0:· | 0003bde0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003bdf0:·6 | 0003bdf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003be00:· | 0003be00:·643d·2269·646d·3736·3437·223e·3c70·7265··d="idm7647"><pre | ||
| 0003be10:· | 0003be10:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | ||
| 0003be20:· | 0003be20:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | ||
| 0003be30:· | 0003be30:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | ||
| 0003be40:· | 0003be40:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | ||
| 0003be50:· | 0003be50:·2120·2820·7b20·7270·6d20·2d2d·7175·6965··!·(·{·rpm·--quie | ||
| 0003be60:· | 0003be60:·7420·2d71·206b·6572·6e65·6c20·3b7d·2026··t·-q·kernel·;}·& | ||
| 0003be70:·6 | 0003be70:·616d·703b·2661·6d70·3b20·7b20·7270·6d20··amp;&·{·rpm· | ||
| 0003be80:· | 0003be80:·2d2d·7175·6965·7420·2d71·2072·706d·2d6f··--quiet·-q·rpm-o | ||
| 0003be90:·7 | 0003be90:·7374·7265·6520·3b7d·2026·616d·703b·2661··stree·;}·&&a | ||
| 0003bea0:·6 | 0003bea0:·6d70·3b20·7b20·7270·6d20·2d2d·7175·6965··mp;·{·rpm·--quie | ||
| 0003beb0:· | 0003beb0:·7420·2d71·2062·6f6f·7463·203b·7d20·2661··t·-q·bootc·;}·&a | ||
| 0003bec0:·6 | 0003bec0:·6d70·3b26·616d·703b·207b·2021·2072·706d··mp;&·{·!·rpm | ||
| 0003bed0:· | 0003bed0:·202d·2d71·7569·6574·202d·7120·6f70·656e···--quiet·-q·open | ||
| 0003bee0:· | 0003bee0:·7368·6966·742d·6b75·6265·6c65·7420·3b7d··shift-kubelet·;} | ||
| 0003bef0:· | 0003bef0:·2029·3b20·7468·656e·0a0a·2320·4669·6e64···);·then..#·Find | ||
| 0003bf00:· | 0003bf00:·2077·6869·6368·2066·696c·6573·2068·6176···which·files·hav | ||
| 0003bf10:·6 | 0003bf10:·6520·696e·636f·7272·6563·7420·6861·7368··e·incorrect·hash | ||
| 0003bf20:· | 0003bf20:·2028·6e6f·7420·696e·202f·6574·632c·2062···(not·in·/etc,·b | ||
| 0003bf30:· | 0003bf30:·6563·6175·7365·206f·6620·7468·6520·7379··ecause·of·the·sy | ||
| 0003bf40:· | 0003bf40:·7374·656d·2072·656c·6174·6564·2063·6f6e··stem·related·con | ||
| 0003bf50:· | 0003bf50:·6669·6720·6669·6c65·7329·2061·6e64·2074··fig·files)·and·t | ||
| 0003bf60:· | 0003bf60:·6865·6e20·6765·7420·6669·6c65·7320·6e61··hen·get·files·na | ||
| 0003bf70:· | 0003bf70:·6d65·730a·6669·6c65·735f·7769·7468·5f69··mes.files_with_i | ||
| 0003bf80:· | 0003bf80:·6e63·6f72·7265·6374·5f68·6173·683d·2224··ncorrect_hash="$ | ||
| 0003bf90:· | 0003bf90:·2872·706d·202d·5661·202d·2d6e·6f63·6f6e··(rpm·-Va·--nocon | ||
| 0003bfa0:· | 0003bfa0:·6669·6720·7c20·6772·6570·202d·4520·275e··fig·|·grep·-E·'^ | ||
| 0003bfb0:· | 0003bfb0:·2e2e·3527·207c·2061·776b·2027·7b70·7269··..5'·|·awk·'{pri | ||
| 0003bfc0:· | 0003bfc0:·6e74·2024·4e46·7d27·2029·220a·0a69·6620··nt·$NF}'·)"..if· | ||
| 0003bfd0:· | 0003bfd0:·5b20·2d6e·2022·2466·696c·6573·5f77·6974··[·-n·"$files_wit | ||
| 0003bfe0:· | 0003bfe0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003bff0:· | 0003bff0:·2220·5d3b·2074·6865·6e0a·2020·2020·2320··"·];·then.····#· | ||
| 0003c000:· | 0003c000:·4672·6f6d·2066·696c·6573·206e·616d·6573··From·files·names | ||
| 0003c010:· | 0003c010:·2067·6574·2070·6163·6b61·6765·206e·616d···get·package·nam | ||
| 0003c020:· | 0003c020:·6573·2061·6e64·2063·6861·6e67·6520·6e65··es·and·change·ne | ||
| 0003c030:· | 0003c030:·776c·696e·6520·746f·2073·7061·6365·2c20··wline·to·space,· | ||
| 0003c040:· | 0003c040:·6265·6361·7573·6520·7270·6d20·7772·6974··because·rpm·writ | ||
| 0003c050:· | 0003c050:·6573·2065·6163·6820·7061·636b·6167·6520··es·each·package· | ||
| 0003c060:· | 0003c060:·746f·206e·6577·206c·696e·650a·2020·2020··to·new·line.···· | ||
| 0003c070:· | 0003c070:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003c080:· | 0003c080:·7374·616c·6c3d·2224·2872·706d·202d·7166··stall="$(rpm·-qf | ||
| 0003c090:· | 0003c090:·2024·6669·6c65·735f·7769·7468·5f69·6e63···$files_with_inc | ||
| 0003c0a0:·6 | 0003c0a0:·6f72·7265·6374·5f68·6173·6820·7c20·7472··orrect_hash·|·tr | ||
| 0003c0b0:· | 0003c0b0:·2027·5c6e·2720·2720·2729·220a·0a20·2020···'\n'·'·')"..··· | ||
| 0003c0c0:· | 0003c0c0:·200a·2020·2020·7975·6d20·7265·696e·7374···.····yum·reinst | ||
| 0003c0d0:·6 | 0003c0d0:·616c·6c20·2d79·2024·7061·636b·6167·6573··all·-y·$packages | ||
| 0003c0e0:· | 0003c0e0:·5f74·6f5f·7265·696e·7374·616c·6c0a·2020··_to_reinstall.·· | ||
| 0003c0f0:·20 | 0003c0f0:·2020·0a66·690a·0a65·6c73·650a·2020·2020····.fi..else.···· | ||
| 0003c100:·2 | 0003c100:·2667·743b·2661·6d70·3b32·2065·6368·6f20··>&2·echo· | ||
| 0003c110:· | 0003c110:·2752·656d·6564·6961·7469·6f6e·2069·7320··'Remediation·is· | ||
| 0003c120:· | 0003c120:·6e6f·7420·6170·706c·6963·6162·6c65·2c20··not·applicable,· | ||
| 0003c130:·6 | 0003c130:·6e6f·7468·696e·6720·7761·7320·646f·6e65··nothing·was·done | ||
| 0003c140:· | 0003c140:·270a·6669·0a3c·2f63·6f64·653e·3c2f·7072··'.fi.</code></pr | ||
| 0003c150:· | 0003c150:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 0003c160:· | 0003c160:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 0003c170:· | 0003c170:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003c180:· | 0003c180:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 0003c190:·6 | 0003c190:·6172·6765·743d·2223·6964·6d37·3634·3822··arget="#idm7648" | ||
| 0003c1a0:· | 0003c1a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003c1b0:·6 | 0003c1b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c1c0:· | 0003c1c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c1d0:· | 0003c1d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c1e0:·6 | 0003c1e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c1f0:· | 0003c1f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c200:·6 | 0003c200:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 0003c210:·6 | 0003c210:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003c220:· | 0003c220:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003c230:·6 | 0003c230:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003c240:· | 0003c240:·6522·2069·643d·2269·646d·3736·3438·223e··e"·id="idm7648"> | ||
| 0003c250:· | 0003c250:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0003c260:· | 0003c260:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0003c270:· | 0003c270:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003c280:·2 | 0003c280:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0003c290:·2 | 0003c290:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0003c2a0:· | 0003c2a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6869··xity:</th><td>hi | ||
| 0003c2b0:· | 0003c2b0:·6768·3c2f·7464·3e3c·2f74·723e·3c74·723e··gh</td></tr><tr> | ||
| 0003c2c0:· | 0003c2c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003c2d0:·2 | 0003c2d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003c2e0:· | 0003c2e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003c2f0:· | 0003c2f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003c300:· | 0003c300:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003c310:· | 0003c310:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003c320:· | 0003c320:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003c330:· | 0003c330:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003c340:· | 0003c340:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003c350:· | 0003c350:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | ||
| 0003c360:·20 | 0003c360:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | ||
| 0003c370:·2 | 0003c370:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | ||
| 0003c380:· | 0003c380:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | ||
| 0003c390:·6 | 0003c390:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | ||
| 0003c3a0:· | 0003c3a0:·452d·3830·3835·372d·360a·2020·2d20·434a··E-80857-6.··-·CJ | ||
| 0003c3b0:· | 0003c3b0:·4953·2d35·2e31·302e·342e·310a·2020·2d20··IS-5.10.4.1.··-· | ||
| 0003c3c0:· | 0003c3c0:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | ||
| 0003c3d0:· | 0003c3d0:·2e38·0a20·202d·204e·4953·542d·3830·302d··.8.··-·NIST-800- | ||
| 0003c3e0:· | 0003c3e0:·3137·312d·332e·342e·310a·2020·2d20·4e49··171-3.4.1.··-·NI | ||
| 0003c3f0:· | 0003c3f0:·5354·2d38·3030·2d35·332d·4155·2d39·2833··ST-800-53-AU-9(3 | ||
| 0003c400:· | 0003c400:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c410:· | 0003c410:·332d·434d·2d36·2863·290a·2020·2d20·4e49··3-CM-6(c).··-·NI | ||
| 0003c420:· | 0003c420:·5354·2d38·3030·2d35·332d·434d·2d36·2864··ST-800-53-CM-6(d | ||
| 0003c430:·2 | 0003c430:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003c440:· | 0003c440:·332d·5349·2d37·0a20·202d·204e·4953·542d··3-SI-7.··-·NIST- | ||
| 0003c450:· | 0003c450:·3830·302d·3533·2d53·492d·3728·3129·0a20··800-53-SI-7(1).· | ||
| 0003c460:·20 | 0003c460:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003c470:· | 0003c470:·492d·3728·3629·0a20·202d·2050·4349·2d44··I-7(6).··-·PCI-D | ||
| 0003c480:· | 0003c480:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | ||
| 0003c490:· | 0003c490:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | ||
| 0003c4a0:· | 0003c4a0:·0a20·202d·2068·6967·685f·636f·6d70·6c65··.··-·high_comple | ||
| 0003c4b0:·7 | 0003c4b0:·7869·7479·0a20·202d·2068·6967·685f·7365··xity.··-·high_se | ||
| 0003c4c0:·6 | 0003c4c0:·7665·7269·7479·0a20·202d·206d·6564·6975··verity.··-·mediu | ||
| 0003c4d0:· | 0003c4d0:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0003c4e0:·206 | 0003c4e0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | ||
| 0003c4f0:· | 0003c4f0:·640a·2020·2d20·7265·7374·7269·6374·5f73··d.··-·restrict_s | ||
| 0003c500:· | 0003c500:·7472·6174·6567·790a·2020·2d20·7270·6d5f··trategy.··-·rpm_ | ||
| 0003c510:· | 0003c510:·7665·7269·6679·5f68·6173·6865·730a·0a2d··verify_hashes..- | ||
| 0003c520:· | 0003c520:·206e·616d·653a·2027·5365·7420·6661·6374···name:·'Set·fact | ||
| Max diff block lines reached; 6784941/6840721 bytes (99.18%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 33 lines modified | ||
| 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 115 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 116 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 117 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 118 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 124 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 125 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 126 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 127 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 128 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 129 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 130 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 131 | fi | ||
| 132 | else | ||
| 133 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 134 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 127 | -·name:·Gather·the·package·facts | 140 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 141 | ··package_facts: |
| Offset 295, 33 lines modified | Offset 314, 14 lines modified | ||
| 295 | ··-·PCI-DSSv4-11.5.2 | 314 | ··-·PCI-DSSv4-11.5.2 |
| 296 | ··-·high_complexity | 315 | ··-·high_complexity |
| 297 | ··-·high_severity | 316 | ··-·high_severity |
| 298 | ··-·medium_disruption | 317 | ··-·medium_disruption |
| 299 | ··-·no_reboot_needed | 318 | ··-·no_reboot_needed |
| 300 | ··-·restrict_strategy | 319 | ··-·restrict_strategy |
| 301 | ··-·rpm_verify_hashes | 320 | ··-·rpm_verify_hashes |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 303 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 304 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 305 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 306 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 307 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 308 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 309 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 310 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 311 | fi | ||
| 312 | else | ||
| 313 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 314 | fi | ||
| 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 316 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 322 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 317 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 323 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 318 | run·the·following·command·to·determine·which·package·owns·it: | 324 | run·the·following·command·to·determine·which·package·owns·it: |
| 319 | $·rpm·-qf·FILENAME | 325 | $·rpm·-qf·FILENAME |
| 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 321 | $·sudo·rpm·--restore·PACKAGENAME | 327 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 341, 14 lines modified | Offset 341, 46 lines modified | ||
| 341 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 341 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 342 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 342 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 343 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 343 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 344 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 344 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 345 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 345 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 346 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 346 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 347 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 347 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 353 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 354 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 355 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 356 | declare·-A·SETPERMS_RPM_DICT | ||
| 357 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 358 | #·is·expected·by·the·RPM·database | ||
| 359 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 360 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 361 | do | ||
| 362 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 363 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 364 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 365 | done | ||
| 366 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 367 | #·correct·values | ||
| 368 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 369 | do | ||
| 370 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 371 | done | ||
| 372 | else | ||
| 373 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 374 | fi | ||
| 348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 353 | -·name:·Gather·the·package·facts | 380 | -·name:·Gather·the·package·facts |
| 354 | ··package_facts: | 381 | ··package_facts: |
| Offset 460, 46 lines modified | Offset 492, 14 lines modified | ||
| 460 | ··-·PCI-DSSv4-11.5.2 | 492 | ··-·PCI-DSSv4-11.5.2 |
| 461 | ··-·high_complexity | 493 | ··-·high_complexity |
| 462 | ··-·high_severity | 494 | ··-·high_severity |
| 463 | ··-·medium_disruption | 495 | ··-·medium_disruption |
| 464 | ··-·no_reboot_needed | 496 | ··-·no_reboot_needed |
| 465 | ··-·restrict_strategy | 497 | ··-·restrict_strategy |
| 466 | ··-·rpm_verify_ownership | 498 | ··-·rpm_verify_ownership |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 746154/753879 bytes (98.98%) of diff not shown. | |||
| Offset 15344, 414 lines modified | Offset 15344, 414 lines modified | ||
| 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3437··target="#idm7647 | 0003bef0:·7461·7267·6574·3d22·2369·646d·3736·3437··target="#idm7647 | ||
| 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003bf00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003bf10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003bf20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003bf30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003bf40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003bf50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bf60:·696f·6e20· | 0003bf60:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003bf70:· | 0003bf70:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003bf80:· | 0003bf80:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003bf90:· | 0003bf90:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003bfa0:· | 0003bfa0:·2069·643d·2269·646d·3736·3437·223e·3c70···id="idm7647"><p | ||
| 0003bfb0:· | 0003bfb0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003bfc0:·6 | 0003bfc0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003bfd0:·6 | 0003bfd0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003bfe0:· | 0003bfe0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003bff0:·6 | 0003bff0:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003c000:·6 | 0003c000:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003c010:·6 | 0003c010:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003c020:· | 0003c020:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003c030:· | 0003c030:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003c040:·2 | 0003c040:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003c050:· | 0003c050:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003c060:· | 0003c060:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003c070:· | 0003c070:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003c080:· | 0003c080:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003c090:· | 0003c090:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003c0a0:·6 | 0003c0a0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003c0b0:· | 0003c0b0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003c0c0:· | 0003c0c0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003c0d0:·20 | 0003c0d0:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003c0e0:· | 0003c0e0:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003c0f0:· | 0003c0f0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003c100:· | 0003c100:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003c110:· | 0003c110:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003c120:· | 0003c120:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003c130:· | 0003c130:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003c140:· | 0003c140:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003c150:· | 0003c150:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003c160:· | 0003c160:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003c170:· | 0003c170:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003c180:· | 0003c180:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003c190:· | 0003c190:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003c1a0:· | 0003c1a0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003c1b0:· | 0003c1b0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003c1c0:· | 0003c1c0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003c1d0:· | 0003c1d0:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003c1e0:· | 0003c1e0:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003c1f0:· | 0003c1f0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003c200:· | 0003c200:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003c210:· | 0003c210:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003c220:·6 | 0003c220:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003c230:·7 | 0003c230:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003c240:· | 0003c240:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003c250:· | 0003c250:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003c260:· | 0003c260:·2020·200a·2020·2020·7975·6d20·7265·696e·····.····yum·rein | ||
| 0003c270:· | 0003c270:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003c280:· | 0003c280:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003c290:· | 0003c290:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003c2a0:· | 0003c2a0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003c2b0:·6 | 0003c2b0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003c2c0:·3 | 0003c2c0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003c2d0:· | 0003c2d0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003c2e0:·6 | 0003c2e0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003c2f0:· | 0003c2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003c300:· | 0003c300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003c310:· | 0003c310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003c320:· | 0003c320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003c330:· | 0003c330:·2d74·6172·6765·743d·2223·6964·6d37·3634··-target="#idm764 | ||
| 0003c340:· | 0003c340:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003c350:· | 0003c350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003c360:·6 | 0003c360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003c370:· | 0003c370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003c380:·61 | 0003c380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003c390:·66 | 0003c390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003c3a0:· | 0003c3a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003c3b0:· | 0003c3b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003c3c0:· | 0003c3c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003c3d0:· | 0003c3d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003c3e0:· | 0003c3e0:·7073·6522·2069·643d·2269·646d·3736·3438··pse"·id="idm7648 | ||
| 0003c3f0:· | 0003c3f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003c400:· | 0003c400:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003c410:· | 0003c410:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003c420:· | 0003c420:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003c430:· | 0003c430:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003c440:· | 0003c440:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003c450:· | 0003c450:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003c460:· | 0003c460:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003c470:· | 0003c470:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003c480:· | 0003c480:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c490:· | 0003c490:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003c4a0:·43 | 0003c4a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003c4b0:· | 0003c4b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003c4c0:· | 0003c4c0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003c4d0:· | 0003c4d0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003c4e0:· | 0003c4e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003c4f0:·2 | 0003c4f0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003c500:· | 0003c500:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003c510:· | 0003c510:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003c520:· | 0003c520:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003c530:· | 0003c530:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003c540:· | 0003c540:·4343·452d·3830·3835·372d·360a·2020·2d20··CCE-80857-6.··-· | ||
| 0003c550:· | 0003c550:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003c560:· | 0003c560:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003c570:· | 0003c570:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003c580:· | 0003c580:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003c590:· | 0003c590:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003c5a0:· | 0003c5a0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003c5b0:· | 0003c5b0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003c5c0:· | 0003c5c0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003c5d0:· | 0003c5d0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003c5e0:·2 | 0003c5e0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003c5f0:· | 0003c5f0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003c600:· | 0003c600:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c610:·2d | 0003c610:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003c620:· | 0003c620:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003c630:·2 | 0003c630:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003c640:· | 0003c640:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003c650:· | 0003c650:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003c660:· | 0003c660:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003c670:·6 | 0003c670:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003c680:· | 0003c680:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003c690:·6 | 0003c690:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003c6a0:· | 0003c6a0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003c6b0:·6 | 0003c6b0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003c6c0:· | 0003c6c0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| Max diff block lines reached; 17463841/17519621 bytes (99.68%) of diff not shown. | |||
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 121 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 122 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 123 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 124 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 130 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 131 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 132 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 133 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 134 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 135 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 136 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·Gather·the·package·facts | 146 | -·name:·Gather·the·package·facts |
| 134 | ··package_facts: | 147 | ··package_facts: |
| Offset 301, 33 lines modified | Offset 320, 14 lines modified | ||
| 301 | ··-·PCI-DSSv4-11.5.2 | 320 | ··-·PCI-DSSv4-11.5.2 |
| 302 | ··-·high_complexity | 321 | ··-·high_complexity |
| 303 | ··-·high_severity | 322 | ··-·high_severity |
| 304 | ··-·medium_disruption | 323 | ··-·medium_disruption |
| 305 | ··-·no_reboot_needed | 324 | ··-·no_reboot_needed |
| 306 | ··-·restrict_strategy | 325 | ··-·restrict_strategy |
| 307 | ··-·rpm_verify_hashes | 326 | ··-·rpm_verify_hashes |
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 309 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 310 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 311 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 312 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 313 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 314 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 315 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 316 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 317 | fi | ||
| 318 | else | ||
| 319 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 320 | fi | ||
| 321 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 322 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 328 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 323 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 329 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 324 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 330 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 325 | $·rpm·-qf·FILENAME | 331 | $·rpm·-qf·FILENAME |
| 326 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 332 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 349, 14 lines modified | Offset 349, 50 lines modified | ||
| 349 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 349 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 350 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 350 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 351 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 351 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 352 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 352 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 353 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 353 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 354 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 355 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 355 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 361 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 362 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 363 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 364 | declare·-A·SETPERMS_RPM_DICT | ||
| 365 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 366 | #·is·expected·by·the·RPM·database | ||
| 367 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 368 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 369 | do | ||
| 370 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 371 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 372 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 373 | ········do | ||
| 374 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 375 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 376 | ········done | ||
| 377 | done | ||
| 378 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 379 | #·correct·values | ||
| 380 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 381 | do | ||
| 382 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 383 | done | ||
| 384 | else | ||
| 385 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 386 | fi | ||
| 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 361 | -·name:·Gather·the·package·facts | 392 | -·name:·Gather·the·package·facts |
| 362 | ··package_facts: | 393 | ··package_facts: |
| Offset 472, 50 lines modified | Offset 508, 14 lines modified | ||
| 472 | ··-·PCI-DSSv4-11.5.2 | 508 | ··-·PCI-DSSv4-11.5.2 |
| 473 | ··-·high_complexity | 509 | ··-·high_complexity |
| 474 | ··-·high_severity | 510 | ··-·high_severity |
| 475 | ··-·medium_disruption | 511 | ··-·medium_disruption |
| 476 | ··-·no_reboot_needed | 512 | ··-·no_reboot_needed |
| 477 | ··-·restrict_strategy | 513 | ··-·restrict_strategy |
| 478 | ··-·rpm_verify_permissions | 514 | ··-·rpm_verify_permissions |
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1375505/1383603 bytes (99.41%) of diff not shown. | |||
| Offset 15352, 414 lines modified | Offset 15352, 414 lines modified | ||
| 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003bf70:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003bf80:·3634·3722·2074·6162·696e·6465·783d·2230··647"·tabindex="0 | 0003bf80:·3634·3722·2074·6162·696e·6465·783d·2230··647"·tabindex="0 | ||
| 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003bf90:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003bfa0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003bfb0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003bfc0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003bfd0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003bfe0:·6961·7469·6f6e·20 | 0003bfe0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0003bff0:·6 | 0003bff0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0003c000:· | 0003c000:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003c010:· | 0003c010:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003c020:· | 0003c020:·7365·2220·6964·3d22·6964·6d37·3634·3722··se"·id="idm7647" | ||
| 0003c030:·3 | 0003c030:·3e3c·7072·653e·3c63·6f64·653e·2320·5265··><pre><code>#·Re | ||
| 0003c040:· | 0003c040:·6d65·6469·6174·696f·6e20·6973·2061·7070··mediation·is·app | ||
| 0003c050:· | 0003c050:·6c69·6361·626c·6520·6f6e·6c79·2069·6e20··licable·only·in· | ||
| 0003c060:·6 | 0003c060:·6365·7274·6169·6e20·706c·6174·666f·726d··certain·platform | ||
| 0003c070:· | 0003c070:·730a·6966·2021·2028·207b·2072·706d·202d··s.if·!·(·{·rpm·- | ||
| 0003c080:· | 0003c080:·2d71·7569·6574·202d·7120·6b65·726e·656c··-quiet·-q·kernel | ||
| 0003c090:· | 0003c090:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003c0a0:· | 0003c0a0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003c0b0:· | 0003c0b0:·7270·6d2d·6f73·7472·6565·203b·7d20·2661··rpm-ostree·;}·&a | ||
| 0003c0c0:· | 0003c0c0:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003c0d0:· | 0003c0d0:·2d71·7569·6574·202d·7120·626f·6f74·6320··-quiet·-q·bootc· | ||
| 0003c0e0:·3 | 0003c0e0:·3b7d·2026·616d·703b·2661·6d70·3b20·7b20··;}·&&·{· | ||
| 0003c0f0:· | 0003c0f0:·2120·7270·6d20·2d2d·7175·6965·7420·2d71··!·rpm·--quiet·-q | ||
| 0003c100:· | 0003c100:·206f·7065·6e73·6869·6674·2d6b·7562·656c···openshift-kubel | ||
| 0003c110:·74 | 0003c110:·6574·203b·7d20·293b·2074·6865·6e0a·0a23··et·;}·);·then..# | ||
| 0003c120:·2 | 0003c120:·2046·696e·6420·7768·6963·6820·6669·6c65···Find·which·file | ||
| 0003c130:· | 0003c130:·7320·6861·7665·2069·6e63·6f72·7265·6374··s·have·incorrect | ||
| 0003c140:·20 | 0003c140:·2068·6173·6820·286e·6f74·2069·6e20·2f65···hash·(not·in·/e | ||
| 0003c150:·74 | 0003c150:·7463·2c20·6265·6361·7573·6520·6f66·2074··tc,·because·of·t | ||
| 0003c160:· | 0003c160:·6865·2073·7973·7465·6d20·7265·6c61·7465··he·system·relate | ||
| 0003c170:·206 | 0003c170:·6420·636f·6e66·6967·2066·696c·6573·2920··d·config·files)· | ||
| 0003c180:· | 0003c180:·616e·6420·7468·656e·2067·6574·2066·696c··and·then·get·fil | ||
| 0003c190:· | 0003c190:·6573·206e·616d·6573·0a66·696c·6573·5f77··es·names.files_w | ||
| 0003c1a0:· | 0003c1a0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003c1b0:· | 0003c1b0:·7368·3d22·2428·7270·6d20·2d56·6120·2d2d··sh="$(rpm·-Va·-- | ||
| 0003c1c0:· | 0003c1c0:·6e6f·636f·6e66·6967·207c·2067·7265·7020··noconfig·|·grep· | ||
| 0003c1d0:·2d | 0003c1d0:·2d45·2027·5e2e·2e35·2720·7c20·6177·6b20··-E·'^..5'·|·awk· | ||
| 0003c1e0:·2 | 0003c1e0:·277b·7072·696e·7420·244e·467d·2720·2922··'{print·$NF}'·)" | ||
| 0003c1f0:· | 0003c1f0:·0a0a·6966·205b·202d·6e20·2224·6669·6c65··..if·[·-n·"$file | ||
| 0003c200:· | 0003c200:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003c210:· | 0003c210:·5f68·6173·6822·205d·3b20·7468·656e·0a20··_hash"·];·then.· | ||
| 0003c220:· | 0003c220:·2020·2023·2046·726f·6d20·6669·6c65·7320·····#·From·files· | ||
| 0003c230:· | 0003c230:·6e61·6d65·7320·6765·7420·7061·636b·6167··names·get·packag | ||
| 0003c240:· | 0003c240:·6520·6e61·6d65·7320·616e·6420·6368·616e··e·names·and·chan | ||
| 0003c250:· | 0003c250:·6765·206e·6577·6c69·6e65·2074·6f20·7370··ge·newline·to·sp | ||
| 0003c260:· | 0003c260:·6163·652c·2062·6563·6175·7365·2072·706d··ace,·because·rpm | ||
| 0003c270:·20 | 0003c270:·2077·7269·7465·7320·6561·6368·2070·6163···writes·each·pac | ||
| 0003c280:· | 0003c280:·6b61·6765·2074·6f20·6e65·7720·6c69·6e65··kage·to·new·line | ||
| 0003c290:· | 0003c290:·0a20·2020·2070·6163·6b61·6765·735f·746f··.····packages_to | ||
| 0003c2a0:· | 0003c2a0:·5f72·6569·6e73·7461·6c6c·3d22·2428·7270··_reinstall="$(rp | ||
| 0003c2b0:·6 | 0003c2b0:·6d20·2d71·6620·2466·696c·6573·5f77·6974··m·-qf·$files_wit | ||
| 0003c2c0:· | 0003c2c0:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003c2d0:· | 0003c2d0:·207c·2074·7220·275c·6e27·2027·2027·2922···|·tr·'\n'·'·')" | ||
| 0003c2e0:· | 0003c2e0:·0a0a·2020·2020·0a20·2020·2079·756d·2072··..····.····yum·r | ||
| 0003c2f0:· | 0003c2f0:·6569·6e73·7461·6c6c·202d·7920·2470·6163··einstall·-y·$pac | ||
| 0003c300:· | 0003c300:·6b61·6765·735f·746f·5f72·6569·6e73·7461··kages_to_reinsta | ||
| 0003c310:·6 | 0003c310:·6c6c·0a20·2020·200a·6669·0a0a·656c·7365··ll.····.fi..else | ||
| 0003c320:· | 0003c320:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | ||
| 0003c330:·6 | 0003c330:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | ||
| 0003c340:·6 | 0003c340:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | ||
| 0003c350:· | 0003c350:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | ||
| 0003c360:· | 0003c360:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | ||
| 0003c370:· | 0003c370:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | ||
| 0003c380:· | 0003c380:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | ||
| 0003c390:· | 0003c390:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | ||
| 0003c3a0:·6 | 0003c3a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003c3b0:·6 | 0003c3b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003c3c0:· | 0003c3c0:·3736·3438·2220·7461·6269·6e64·6578·3d22··7648"·tabindex=" | ||
| 0003c3d0:· | 0003c3d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003c3e0:·20 | 0003c3e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003c3f0:·6 | 0003c3f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003c400:· | 0003c400:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003c410:· | 0003c410:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003c420:·6 | 0003c420:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003c430:·7 | 0003c430:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003c440:·2 | 0003c440:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003c450:·6 | 0003c450:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003c460:·6 | 0003c460:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 0003c470:· | 0003c470:·3634·3822·3e3c·7461·626c·6520·636c·6173··648"><table·clas | ||
| 0003c480:· | 0003c480:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003c490:·7 | 0003c490:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003c4a0:· | 0003c4a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003c4b0:· | 0003c4b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003c4c0:· | 0003c4c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003c4d0:·4 | 0003c4d0:·7464·3e68·6967·683c·2f74·643e·3c2f·7472··td>high</td></tr | ||
| 0003c4e0:· | 0003c4e0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003c4f0:· | 0003c4f0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003c500:· | 0003c500:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003c510:· | 0003c510:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003c520:·3 | 0003c520:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c530:· | 0003c530:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003c540:· | 0003c540:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | ||
| 0003c550:· | 0003c550:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | ||
| 0003c560:· | 0003c560:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0003c570:· | 0003c570:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | ||
| 0003c580:· | 0003c580:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | ||
| 0003c590:· | 0003c590:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | ||
| 0003c5a0:·6 | 0003c5a0:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | ||
| 0003c5b0:· | 0003c5b0:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | ||
| 0003c5c0:·202 | 0003c5c0:·202d·2043·4345·2d38·3038·3537·2d36·0a20···-·CCE-80857-6.· | ||
| 0003c5d0:· | 0003c5d0:·202d·2043·4a49·532d·352e·3130·2e34·2e31···-·CJIS-5.10.4.1 | ||
| 0003c5e0:· | 0003c5e0:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0003c5f0:· | 0003c5f0:·312d·332e·332e·380a·2020·2d20·4e49·5354··1-3.3.8.··-·NIST | ||
| 0003c600:· | 0003c600:·2d38·3030·2d31·3731·2d33·2e34·2e31·0a20··-800-171-3.4.1.· | ||
| 0003c610:· | 0003c610:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | ||
| 0003c620:· | 0003c620:·552d·3928·3329·0a20·202d·204e·4953·542d··U-9(3).··-·NIST- | ||
| 0003c630:· | 0003c630:·3830·302d·3533·2d43·4d2d·3628·6329·0a20··800-53-CM-6(c).· | ||
| 0003c640:· | 0003c640:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003c650:· | 0003c650:·4d2d·3628·6429·0a20·202d·204e·4953·542d··M-6(d).··-·NIST- | ||
| 0003c660:· | 0003c660:·3830·302d·3533·2d53·492d·370a·2020·2d20··800-53-SI-7.··-· | ||
| 0003c670:· | 0003c670:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003c680:· | 0003c680:·2831·290a·2020·2d20·4e49·5354·2d38·3030··(1).··-·NIST-800 | ||
| 0003c690:·2d | 0003c690:·2d35·332d·5349·2d37·2836·290a·2020·2d20··-53-SI-7(6).··-· | ||
| 0003c6a0:· | 0003c6a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | ||
| 0003c6b0:· | 0003c6b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | ||
| 0003c6c0:· | 0003c6c0:·312e·352e·320a·2020·2d20·6869·6768·5f63··1.5.2.··-·high_c | ||
| 0003c6d0:· | 0003c6d0:·6f6d·706c·6578·6974·790a·2020·2d20·6869··omplexity.··-·hi | ||
| 0003c6e0:·6 | 0003c6e0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 0003c6f0:·6 | 0003c6f0:·6d65·6469·756d·5f64·6973·7275·7074·696f··medium_disruptio | ||
| 0003c700:·6 | 0003c700:·6e0a·2020·2d20·6e6f·5f72·6562·6f6f·745f··n.··-·no_reboot_ | ||
| 0003c710:· | 0003c710:·6e65·6564·6564·0a20·202d·2072·6573·7472··needed.··-·restr | ||
| 0003c720:·6 | 0003c720:·6963·745f·7374·7261·7465·6779·0a20·202d··ict_strategy.··- | ||
| 0003c730:· | 0003c730:·2072·706d·5f76·6572·6966·795f·6861·7368···rpm_verify_hash | ||
| 0003c740:·6 | 0003c740:·6573·0a0a·2d20·6e61·6d65·3a20·2753·6574··es..-·name:·'Set | ||
| Max diff block lines reached; 10178711/10234491 bytes (99.45%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 122 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 123 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 124 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 125 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 130 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 131 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 132 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 133 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 134 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 135 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 136 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 137 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 138 | fi | ||
| 139 | else | ||
| 140 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 141 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 134 | -·name:·Gather·the·package·facts | 147 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 148 | ··package_facts: |
| Offset 302, 33 lines modified | Offset 321, 14 lines modified | ||
| 302 | ··-·PCI-DSSv4-11.5.2 | 321 | ··-·PCI-DSSv4-11.5.2 |
| 303 | ··-·high_complexity | 322 | ··-·high_complexity |
| 304 | ··-·high_severity | 323 | ··-·high_severity |
| 305 | ··-·medium_disruption | 324 | ··-·medium_disruption |
| 306 | ··-·no_reboot_needed | 325 | ··-·no_reboot_needed |
| 307 | ··-·restrict_strategy | 326 | ··-·restrict_strategy |
| 308 | ··-·rpm_verify_hashes | 327 | ··-·rpm_verify_hashes |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 311 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 312 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 313 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 314 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 315 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 316 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 317 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 318 | fi | ||
| 319 | else | ||
| 320 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 321 | fi | ||
| 322 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 323 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 329 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 324 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 330 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 325 | run·the·following·command·to·determine·which·package·owns·it: | 331 | run·the·following·command·to·determine·which·package·owns·it: |
| 326 | $·rpm·-qf·FILENAME | 332 | $·rpm·-qf·FILENAME |
| 327 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 333 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 328 | $·sudo·rpm·--restore·PACKAGENAME | 334 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 348, 14 lines modified | Offset 348, 46 lines modified | ||
| 348 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 348 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 349 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 349 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 350 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 350 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 351 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 351 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 352 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 352 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 353 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 353 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 354 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 354 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 360 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 361 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 362 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 363 | declare·-A·SETPERMS_RPM_DICT | ||
| 364 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 365 | #·is·expected·by·the·RPM·database | ||
| 366 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 367 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 368 | do | ||
| 369 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 370 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 371 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 372 | done | ||
| 373 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 374 | #·correct·values | ||
| 375 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 376 | do | ||
| 377 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 378 | done | ||
| 379 | else | ||
| 380 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 381 | fi | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 360 | -·name:·Gather·the·package·facts | 387 | -·name:·Gather·the·package·facts |
| 361 | ··package_facts: | 388 | ··package_facts: |
| Offset 467, 46 lines modified | Offset 499, 14 lines modified | ||
| 467 | ··-·PCI-DSSv4-11.5.2 | 499 | ··-·PCI-DSSv4-11.5.2 |
| 468 | ··-·high_complexity | 500 | ··-·high_complexity |
| 469 | ··-·high_severity | 501 | ··-·high_severity |
| 470 | ··-·medium_disruption | 502 | ··-·medium_disruption |
| 471 | ··-·no_reboot_needed | 503 | ··-·no_reboot_needed |
| 472 | ··-·restrict_strategy | 504 | ··-·restrict_strategy |
| 473 | ··-·rpm_verify_ownership | 505 | ··-·rpm_verify_ownership |
| 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1054355/1062080 bytes (99.27%) of diff not shown. | |||
| Offset 15256, 285 lines modified | Offset 15256, 285 lines modified | ||
| 0003b970:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b970:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b980:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | 0003b980:·2223·6964·6d37·3939·3022·2074·6162·696e··"#idm7990"·tabin | ||
| 0003b990:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b990:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b9a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b9a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b9b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b9b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b9c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b9c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b9d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b9d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b9e0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b9e0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b9f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003ba00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ba10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ba20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ba30:·2269·646d·3739·3930·223e·3c74·6162·6c65··"idm7990"><table | |||
| 0003ba40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ba50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ba60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ba70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003ba90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b9f0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003ba00:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003ba10:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003ba20:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003ba30:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003ba40:·3930·223e·3c70·7265·3e3c·636f·6465·3e0a··90"><pre><code>. | |||
| 0003ba50:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003ba60:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003ba70:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003ba80:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ba90:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003baa0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bab0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bac0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bad0:·3939·3122·2074·6162·696e·6465·783d·2230··991"·tabindex="0 | |||
| 0003bae0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003baf0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bb00:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bb10:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bb20:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bb30:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003bb40:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bb50:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bb60:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bb70:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003bb80:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bb90:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bba0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bbb0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bbc0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003bbd0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003bbe0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003bad0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003bbf0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bc00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b | 0003bc10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bc20:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003bc30:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bc40:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bc50:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bc60:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bc70:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003bb00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003bb10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bb20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bb30:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003bb40:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003bb50:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003bb60:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003bb70:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003bb80:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003bb90:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bba0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bbb0:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003bbc0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bbd0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003bbe0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003bbf0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003bc00:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003bc10:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003bc20:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003bc30:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003bc40:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003bc50:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003bc60:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003bc70:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003bc80:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bc90:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bca0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bcb0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bcc0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bcd0:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003bce0:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003bcf0:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003bd00:·0a20·202d·2043·4345·2d38·3038·3434·2d34··.··-·CCE-80844-4 | |||
| 0003bd10:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bd20:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bd30:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bd40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bd50:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003bd60:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003bd70:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003bd80:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003bd90:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003bda0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003bdb0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003bdc0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003bdd0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003bde0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003bdf0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003be00:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003be10:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003be20:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003be30:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003be40:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003be50:·3d22·2369·646d·3739·3931·2220·7461·6269··="#idm7991"·tabi | |||
| 0003be60:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003be70:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003be80:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003be90:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bea0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003beb0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003bec0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bed0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bee0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bef0:·7073·6522·2069·643d·2269·646d·3739·3931··pse"·id="idm7991 | |||
| 0003bf00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bf10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| Max diff block lines reached; 10103664/10141642 bytes (99.63%) of diff not shown. | |||
| Offset 114, 14 lines modified | Offset 114, 60 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r958944_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·rpm·--quiet·-q·kernel;·then | ||
| 143 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 144 | ····yum·install·-y·"aide" | ||
| 145 | fi | ||
| 146 | else | ||
| 147 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 148 | fi | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | dnf·install·aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Gather·the·package·facts | 166 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 167 | ··package_facts: |
| Offset 161, 60 lines modified | Offset 207, 14 lines modified | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | package·install·aide | 212 | package·install·aide |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 177 | if·rpm·--quiet·-q·kernel;·then | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 179 | ····yum·install·-y·"aide" | ||
| 180 | fi | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | dnf·install·aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 195 | include·install_aide | ||
| 196 | class·install_aide·{ | ||
| 197 | ··package·{·'aide': | ||
| 198 | ····ensure·=>·'installed', | ||
| 199 | ··} | ||
| 200 | } | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 206 | package·--add=aide | ||
| 207 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 213 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 208 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 214 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 209 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 215 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 210 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 216 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 282, 90 lines modified | Offset 282, 110 lines modified | ||
| 282 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 282 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 283 | Severity: ···medium | 283 | Severity: ···medium |
| 284 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 284 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 285 | Identifiers:·CCE-82723-8 | 285 | Identifiers:·CCE-82723-8 |
| 286 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 | 286 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-002890,·CCI-002450,·CCI-003123 |
| Max diff block lines reached; 1329215/1334866 bytes (99.58%) of diff not shown. | |||
| Offset 15345, 414 lines modified | Offset 15345, 414 lines modified | ||
| 0003bf00:·6765·743d·2223·6964·6d37·3634·3722·2074··get="#idm7647"·t | 0003bf00:·6765·743d·2223·6964·6d37·3634·3722·2074··get="#idm7647"·t | ||
| 0003bf10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bf10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003bf20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003bf20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003bf30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003bf30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003bf40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003bf40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003bf50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003bf50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003bf60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003bf60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003bf70:·20 | 0003bf70:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | ||
| 0003bf80:· | 0003bf80:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bf90:· | 0003bf90:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bfa0:· | 0003bfa0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bfb0:· | 0003bfb0:·3d22·6964·6d37·3634·3722·3e3c·7072·653e··="idm7647"><pre> | ||
| 0003bfc0:· | 0003bfc0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | ||
| 0003bfd0:·6 | 0003bfd0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | ||
| 0003bfe0:· | 0003bfe0:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | ||
| 0003bff0:·6 | 0003bff0:·6e20·706c·6174·666f·726d·730a·6966·2021··n·platforms.if·! | ||
| 0003c000:· | 0003c000:·2028·207b·2072·706d·202d·2d71·7569·6574···(·{·rpm·--quiet | ||
| 0003c010:· | 0003c010:·202d·7120·6b65·726e·656c·203b·7d20·2661···-q·kernel·;}·&a | ||
| 0003c020:·3 | 0003c020:·6d70·3b26·616d·703b·207b·2072·706d·202d··mp;&·{·rpm·- | ||
| 0003c030:· | 0003c030:·2d71·7569·6574·202d·7120·7270·6d2d·6f73··-quiet·-q·rpm-os | ||
| 0003c040:· | 0003c040:·7472·6565·203b·7d20·2661·6d70·3b26·616d··tree·;}·&&am | ||
| 0003c050:· | 0003c050:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003c060:· | 0003c060:·202d·7120·626f·6f74·6320·3b7d·2026·616d···-q·bootc·;}·&am | ||
| 0003c070:· | 0003c070:·703b·2661·6d70·3b20·7b20·2120·7270·6d20··p;&·{·!·rpm· | ||
| 0003c080:· | 0003c080:·2d2d·7175·6965·7420·2d71·206f·7065·6e73··--quiet·-q·opens | ||
| 0003c090:· | 0003c090:·6869·6674·2d6b·7562·656c·6574·203b·7d20··hift-kubelet·;}· | ||
| 0003c0a0:·2 | 0003c0a0:·293b·2074·6865·6e0a·0a23·2046·696e·6420··);·then..#·Find· | ||
| 0003c0b0:· | 0003c0b0:·7768·6963·6820·6669·6c65·7320·6861·7665··which·files·have | ||
| 0003c0c0:· | 0003c0c0:·2069·6e63·6f72·7265·6374·2068·6173·6820···incorrect·hash· | ||
| 0003c0d0:· | 0003c0d0:·286e·6f74·2069·6e20·2f65·7463·2c20·6265··(not·in·/etc,·be | ||
| 0003c0e0:·6 | 0003c0e0:·6361·7573·6520·6f66·2074·6865·2073·7973··cause·of·the·sys | ||
| 0003c0f0:· | 0003c0f0:·7465·6d20·7265·6c61·7465·6420·636f·6e66··tem·related·conf | ||
| 0003c100:· | 0003c100:·6967·2066·696c·6573·2920·616e·6420·7468··ig·files)·and·th | ||
| 0003c110:· | 0003c110:·656e·2067·6574·2066·696c·6573·206e·616d··en·get·files·nam | ||
| 0003c120:· | 0003c120:·6573·0a66·696c·6573·5f77·6974·685f·696e··es.files_with_in | ||
| 0003c130:· | 0003c130:·636f·7272·6563·745f·6861·7368·3d22·2428··correct_hash="$( | ||
| 0003c140:· | 0003c140:·7270·6d20·2d56·6120·2d2d·6e6f·636f·6e66··rpm·-Va·--noconf | ||
| 0003c150:· | 0003c150:·6967·207c·2067·7265·7020·2d45·2027·5e2e··ig·|·grep·-E·'^. | ||
| 0003c160:·2 | 0003c160:·2e35·2720·7c20·6177·6b20·277b·7072·696e··.5'·|·awk·'{prin | ||
| 0003c170:· | 0003c170:·7420·244e·467d·2720·2922·0a0a·6966·205b··t·$NF}'·)"..if·[ | ||
| 0003c180:· | 0003c180:·202d·6e20·2224·6669·6c65·735f·7769·7468···-n·"$files_with | ||
| 0003c190:· | 0003c190:·5f69·6e63·6f72·7265·6374·5f68·6173·6822··_incorrect_hash" | ||
| 0003c1a0:·20 | 0003c1a0:·205d·3b20·7468·656e·0a20·2020·2023·2046···];·then.····#·F | ||
| 0003c1b0:· | 0003c1b0:·726f·6d20·6669·6c65·7320·6e61·6d65·7320··rom·files·names· | ||
| 0003c1c0:· | 0003c1c0:·6765·7420·7061·636b·6167·6520·6e61·6d65··get·package·name | ||
| 0003c1d0:· | 0003c1d0:·7320·616e·6420·6368·616e·6765·206e·6577··s·and·change·new | ||
| 0003c1e0:· | 0003c1e0:·6c69·6e65·2074·6f20·7370·6163·652c·2062··line·to·space,·b | ||
| 0003c1f0:· | 0003c1f0:·6563·6175·7365·2072·706d·2077·7269·7465··ecause·rpm·write | ||
| 0003c200:· | 0003c200:·7320·6561·6368·2070·6163·6b61·6765·2074··s·each·package·t | ||
| 0003c210:· | 0003c210:·6f20·6e65·7720·6c69·6e65·0a20·2020·2070··o·new·line.····p | ||
| 0003c220:· | 0003c220:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003c230:·7 | 0003c230:·7461·6c6c·3d22·2428·7270·6d20·2d71·6620··tall="$(rpm·-qf· | ||
| 0003c240:· | 0003c240:·2466·696c·6573·5f77·6974·685f·696e·636f··$files_with_inco | ||
| 0003c250:· | 0003c250:·7272·6563·745f·6861·7368·207c·2074·7220··rrect_hash·|·tr· | ||
| 0003c260:·2 | 0003c260:·275c·6e27·2027·2027·2922·0a0a·2020·2020··'\n'·'·')"..···· | ||
| 0003c270:· | 0003c270:·0a20·2020·2079·756d·2072·6569·6e73·7461··.····yum·reinsta | ||
| 0003c280:· | 0003c280:·6c6c·202d·7920·2470·6163·6b61·6765·735f··ll·-y·$packages_ | ||
| 0003c290:· | 0003c290:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003c2a0:· | 0003c2a0:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003c2b0:· | 0003c2b0:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003c2c0:· | 0003c2c0:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003c2d0:·20 | 0003c2d0:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003c2e0:·6 | 0003c2e0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003c2f0:· | 0003c2f0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003c300:· | 0003c300:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003c310:· | 0003c310:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003c320:·2 | 0003c320:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003c330:·6 | 0003c330:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003c340:· | 0003c340:·7267·6574·3d22·2369·646d·3736·3438·2220··rget="#idm7648"· | ||
| 0003c350:· | 0003c350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c360:·65 | 0003c360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c370:·6 | 0003c370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c380:· | 0003c380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c390:·20 | 0003c390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c3a0:· | 0003c3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c3b0:·6 | 0003c3b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003c3c0:· | 0003c3c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003c3d0:· | 0003c3d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003c3e0:·6 | 0003c3e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003c3f0:·2 | 0003c3f0:·2220·6964·3d22·6964·6d37·3634·3822·3e3c··"·id="idm7648">< | ||
| 0003c400:· | 0003c400:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003c410:· | 0003c410:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003c420:·20 | 0003c420:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003c430:· | 0003c430:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003c440:· | 0003c440:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003c450:· | 0003c450:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003c460:· | 0003c460:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003c470:· | 0003c470:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003c480:· | 0003c480:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003c490:· | 0003c490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003c4a0:· | 0003c4a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003c4b0:· | 0003c4b0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003c4c0:· | 0003c4c0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003c4d0:· | 0003c4d0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003c4e0:· | 0003c4e0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003c4f0:· | 0003c4f0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003c500:· | 0003c500:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003c510:· | 0003c510:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003c520:· | 0003c520:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003c530:· | 0003c530:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003c540:· | 0003c540:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 0003c550:· | 0003c550:·2d38·3038·3537·2d36·0a20·202d·2043·4a49··-80857-6.··-·CJI | ||
| 0003c560:· | 0003c560:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003c570:· | 0003c570:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003c580:· | 0003c580:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003c590:· | 0003c590:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003c5a0:· | 0003c5a0:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003c5b0:· | 0003c5b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c5c0:· | 0003c5c0:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003c5d0:· | 0003c5d0:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003c5e0:·0a20·20 | 0003c5e0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003c5f0:·2 | 0003c5f0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003c600:· | 0003c600:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003c610:· | 0003c610:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003c620:·2 | 0003c620:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003c630:· | 0003c630:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003c640:· | 0003c640:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003c650:· | 0003c650:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003c660:·747 | 0003c660:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003c670:· | 0003c670:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003c680:· | 0003c680:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003c690:·6 | 0003c690:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003c6a0:· | 0003c6a0:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003c6b0:·7 | 0003c6b0:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003c6c0:·65 | 0003c6c0:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| 0003c6d0:· | 0003c6d0:·6e61·6d65·3a20·2753·6574·2066·6163·743a··name:·'Set·fact: | ||
| Max diff block lines reached; 17819604/17875384 bytes (99.69%) of diff not shown. | |||
| Offset 15289, 284 lines modified | Offset 15289, 284 lines modified | ||
| 0003bb80:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | 0003bb80:·2d74·6172·6765·743d·2223·6964·6d37·3939··-target="#idm799 | ||
| 0003bb90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bba0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bba0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bbb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bbb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bbc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bbc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bbd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bbd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bbe0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bbe0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bbf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bc20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bc30:·7073·6522·2069·643d·2269·646d·3739·3930··pse"·id="idm7990 | |||
| 0003bc40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bc80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bc90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bca0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b | 0003bbf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003bc00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003bc10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bc20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bc30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bc40:·643d·2269·646d·3739·3930·223e·3c70·7265··d="idm7990"><pre | |||
| 0003bc50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003bc60:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003bc70:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003bc80:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bc90:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bca0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bcb0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bcc0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bcd0:·743d·2223·6964·6d37·3939·3122·2074·6162··t="#idm7991"·tab | |||
| 0003bce0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bcf0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bd00:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bd10:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bd20:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bd30:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003bd40:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003bd50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bd60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bd70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bd80:·3d22·6964·6d37·3939·3122·3e3c·7461·626c··="idm7991"><tabl | |||
| 0003bd90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bda0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bdb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bdc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bdd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003bde0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003bdf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003be00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003be10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003be20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003be30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003be40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003be50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003be60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003be70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003be80:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003be90:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003bea0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003beb0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003bec0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003bed0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003bee0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003bef0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bf00:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bf10:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bf20:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bf30:·7461·7267·6574·3d22·2369·646d·3739·3932··target="#idm7992 | |||
| 0003bf40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bf50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bf60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bf70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bf80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bf90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bfa0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bfb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bfc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bfd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bfe0:·2069·643d·2269·646d·3739·3932·223e·3c74···id="idm7992"><t | |||
| 0003bff0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c000:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c010:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c020:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c030:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003c040:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003c050:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c060:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003c070:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c080:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c090:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003c0a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c0b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c0c0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003 | 0003c0d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c0e0:·3c63·6f64·653e·2320·5265·6d65·6469·6174··<code>#·Remediat | |||
| 0003c0f0:·696f·6e20·6973·2061·7070·6c69·6361·626c··ion·is·applicabl | |||
| 0003c100:·6520·6f6e·6c79·2069·6e20·6365·7274·6169··e·only·in·certai | |||
| 0003c110:·6e20·706c·6174·666f·726d·730a·6966·2072··n·platforms.if·r | |||
| 0003c120:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | |||
| 0003c130:·726e·656c·3b20·7468·656e·0a0a·6966·2021··rnel;·then..if·! | |||
| 0003c140:·2072·706d·202d·7120·2d2d·7175·6965·7420···rpm·-q·--quiet· | |||
| 0003c150:·2261·6964·6522·203b·2074·6865·6e0a·2020··"aide"·;·then.·· | |||
| 0003c160:·2020·7975·6d20·696e·7374·616c·6c20·2d79····yum·install·-y | |||
| 0003c170:·2022·6169·6465·220a·6669·0a0a·656c·7365···"aide".fi..else | |||
| 0003c180:·0a20·2020·2026·6774·3b26·616d·703b·3220··.····>&2· | |||
| 0003c190:·6563·686f·2027·5265·6d65·6469·6174·696f··echo·'Remediatio | |||
| 0003c1a0:·6e20·6973·206e·6f74·2061·7070·6c69·6361··n·is·not·applica | |||
| 0003c1b0:·626c·652c·206e·6f74·6869·6e67·2077·6173··ble,·nothing·was | |||
| 0003c1c0:·2064·6f6e·6527·0a66·690a·3c2f·636f·6465···done'.fi.</code | |||
| 0003bd30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003bd40:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003bd50:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003bd60:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003bd70:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003bd80:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003bd90:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003bda0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003bdb0:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003bdc0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003bdd0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003bde0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003bdf0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003be00:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| Max diff block lines reached; 28944905/28982745 bytes (99.87%) of diff not shown. | |||
| Offset 15308, 284 lines modified | Offset 15308, 284 lines modified | ||
| 0003bcb0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | 0003bcb0:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | ||
| 0003bcc0:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | 0003bcc0:·3930·2220·7461·6269·6e64·6578·3d22·3022··90"·tabindex="0" | ||
| 0003bcd0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003bcd0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003bce0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003bce0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003bcf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003bcf0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003bd00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003bd00:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003bd10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003bd10:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003bd20:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bd30:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bd40:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bd50:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bd60:·6170·7365·2220·6964·3d22·6964·6d37·3939··apse"·id="idm799 | |||
| 0003bd70:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003bd80:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bd90:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bda0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bdb0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bdc0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bdd0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bd | 0003bd20:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003bd30:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003bd40:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd50:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd60:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bd70:·6964·3d22·6964·6d37·3939·3022·3e3c·7072··id="idm7990"><pr | |||
| 0003bd80:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003bd90:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003bda0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003bdb0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003bdc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003bdd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003bde0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003bdf0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003be00:·6574·3d22·2369·646d·3739·3931·2220·7461··et="#idm7991"·ta | |||
| 0003be10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003be20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003be30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003be40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003be50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003be60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003be70:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003be80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003be90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bea0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003beb0:·643d·2269·646d·3739·3931·223e·3c74·6162··d="idm7991"><tab | |||
| 0003bec0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bed0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bee0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bef0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bf00:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003bf10:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003bf20:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bf30:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003bf40:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bf50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003bf60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003bf70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003bf80:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bf90:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bfa0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bfb0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003bfc0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003bfd0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003bfe0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003bff0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003c000:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003be10:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003be20:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003be30:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003be40:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003be50:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003be60:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003be70:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | |||
| 0003be80:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | |||
| 0003be90:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | |||
| 0003bea0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | |||
| 0003beb0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003bec0:·3038·3434·2d34·0a20·202d·2043·4a49·532d··0844-4.··-·CJIS- | |||
| 0003bed0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003bee0:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003bef0:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003bf00:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003bf10:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003bf20:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003bf30:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003bf40:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003bf50:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003bf60:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003bf70:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003bf80:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003bf90:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003bfa0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003bfb0:·616c·6c65·640a·0a2d·206e·616d·653a·2045··alled..-·name:·E | |||
| 0003bfc0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003bfd0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003bfe0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bff0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c000:·7365·6e74·0a20·2077·6865·6e3a·2027·226b··sent.··when:·'"k | |||
| 0003c010:·6572·6e65·6c22·2069·6e20·616e·7369·626c··ernel"·in·ansibl | |||
| 0003c020:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003c030:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003c040:·452d·3830·3834·342d·340a·2020·2d20·434a··E-80844-4.··-·CJ | |||
| 0003c050:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c060:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c070:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c080:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c090:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c0a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c0b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c0c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c0d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c0e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c0f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c100:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003c110:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003c120:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003c130:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003c140:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003c150:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003c160:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003c170:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003c180:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003c190:·3939·3122·2074·6162·696e·6465·783d·2230··991"·tabindex="0 | |||
| 0003c1a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003c1b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003c1c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003c1d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| Max diff block lines reached; 28784744/28822584 bytes (99.87%) of diff not shown. | |||
| Offset 15108, 284 lines modified | Offset 15108, 284 lines modified | ||
| 0003b030:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | 0003b030:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | ||
| 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b040:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b050:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b060:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b070:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b080:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b090:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b0a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b0a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b0b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b0c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b0d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b0e0:·6964·3d22·6964·6d38·3435·3822·3e3c·7461··id="idm8458"><ta | |||
| 0003b0f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b100:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b110:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b120:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b130:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b140:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b150:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b160:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b170:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b180:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b190:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b1a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b1b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b1c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b1d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b1e0:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b1f0:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b200:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b210:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b220:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b230:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b240:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b250:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b260:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b270:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b280:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b290:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2a0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2b0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2c0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b2d0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b2e0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b2f0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b300:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b310:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b320:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b330:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b340:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b350:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b360:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b370:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b380:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b390:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b3a0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b3b0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b3c0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b3d0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b3e0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b3f0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b400:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b410:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b420:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b430:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b440:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b450:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b460:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b470:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b480:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b490:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b4a0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b4b0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b4c0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b4d0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b4e0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b4f0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b500:·6765·743d·2223·6964·6d38·3435·3922·2074··get="#idm8459"·t | |||
| 0003b510:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b520:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b530:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b540:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b550:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b560:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b570:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003b580:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b590:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b5a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b5b0:·3435·3922·3e3c·7461·626c·6520·636c·6173··459"><table·clas | |||
| 0003b5c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b5d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b5e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b5f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b600:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b610:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b620:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b630:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b640:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b650:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b660:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b670:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b680:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b690:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b6a0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b6b0:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 0003b6c0:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b6d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b6e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b6f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b700:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b710:·6765·743d·2223·6964·6d38·3436·3022·2074··get="#idm8460"·t | |||
| 0003b720:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b730:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b740:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b750:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b760:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b770:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b780:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b790:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b7a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b7b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b7c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b7d0:·646d·3834·3630·223e·3c70·7265·3e3c·636f··dm8460"><pre><co | |||
| 0003b7e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b7f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b800:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| Max diff block lines reached; 22918412/22956252 bytes (99.84%) of diff not shown. | |||
| Offset 15113, 284 lines modified | Offset 15113, 284 lines modified | ||
| 0003b080:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | 0003b080:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | ||
| 0003b090:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b090:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b0a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b0a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b0b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b0b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b0c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b0c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b0d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b0d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b0e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b0e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b0f0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b100:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b110:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b120:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b130:·6522·2069·643d·2269·646d·3834·3538·223e··e"·id="idm8458"> | |||
| 0003b140:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b150:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b160:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b170:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b180:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b190:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b1a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b0f0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b100:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b110:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b120:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b130:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b140:·2269·646d·3834·3538·223e·3c70·7265·3e3c··"idm8458"><pre>< | |||
| 0003b150:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b160:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b170:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b180:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b190:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b1a0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b1b0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b1c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b1d0:·2223·6964·6d38·3435·3922·2074·6162·696e··"#idm8459"·tabin | |||
| 0003b1e0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b1f0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b200:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b210:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b220:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b230:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b240:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b250:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b260:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b270:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b280:·6964·6d38·3435·3922·3e3c·7461·626c·6520··idm8459"><table· | |||
| 0003b290:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b2a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b2b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b2d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b2e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b2f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b300:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b310:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b20 | 0003b320:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b330:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b340:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b350:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b360:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b370:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b380:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b390:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b3a0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b3b0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b3c0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b3d0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b3e0:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b220:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b230:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b240:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b250:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b260:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b270:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b280:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b290:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b2a0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b2b0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b2c0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b2d0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2e0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2f0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b300:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b310:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b320:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b330:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b340:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b350:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b360:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b370:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b380:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b390:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b3a0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b3b0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b3c0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b3d0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b3e0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b3f0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b400:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b410:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b420:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b430:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b440:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b450:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b460:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b470:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b480:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b490:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b4a0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b4b0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b4c0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b4d0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b4e0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b4f0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b500:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b | 0003b3f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b400:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b410:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b420:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b | 0003b430:·7267·6574·3d22·2369·646d·3834·3630·2220··rget="#idm8460"· | ||
| 0003b | 0003b440:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b450:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b460:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b470:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b480:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b490:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b4a0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0003b4b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| Max diff block lines reached; 23355601/23393441 bytes (99.84%) of diff not shown. | |||
| Offset 15103, 285 lines modified | Offset 15103, 285 lines modified | ||
| 0003afe0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003afe0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003aff0:·2223·6964·6d38·3435·3822·2074·6162·696e··"#idm8458"·tabin | 0003aff0:·2223·6964·6d38·3435·3822·2074·6162·696e··"#idm8458"·tabin | ||
| 0003b000:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b000:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b010:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b010:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b020:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b020:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b030:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b030:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b040:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b040:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b050:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b050:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b060:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b070:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b080:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b090:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0a0:·2269·646d·3834·3538·223e·3c74·6162·6c65··"idm8458"><table | |||
| 0003b0b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b0d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b0e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b0f0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b100:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b060:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b070:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b080:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b090:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0a0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b0b0:·3538·223e·3c70·7265·3e3c·636f·6465·3e0a··58"><pre><code>. | |||
| 0003b0c0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b0d0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b0e0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b0f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b100:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b110:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b120:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b130:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003b140:·3435·3922·2074·6162·696e·6465·783d·2230··459"·tabindex="0 | |||
| 0003b150:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b160:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b170:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b180:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b190:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1a0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b1b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b1d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b1e0:·6170·7365·2220·6964·3d22·6964·6d38·3435··apse"·id="idm845 | |||
| 0003b1f0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b200:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b210:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b220:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b230:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b | 0003b240:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003b | 0003b250:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b140:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003b260:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003b270:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b | 0003b280:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b290:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2a0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2b0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2c0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b2e0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003b170:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b180:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b190:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b1a0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b1b0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b1c0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b1d0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b1e0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b1f0:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b200:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b210:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b220:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b230:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b240:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b250:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b260:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b270:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b280:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b290:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b2a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b2b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b2c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b2d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b2e0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b2f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b300:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b310:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b320:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b330:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b340:·656e·3a20·2722·6b65·726e·656c·2220·696e··en:·'"kernel"·in | |||
| 0003b350:·2061·6e73·6962·6c65·5f66·6163·7473·2e70···ansible_facts.p | |||
| 0003b360:·6163·6b61·6765·7327·0a20·2074·6167·733a··ackages'.··tags: | |||
| 0003b370:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b380:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b390:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b3a0:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b3b0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b3c0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b3d0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b3e0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b3f0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b400:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b410:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b420:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b430:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b440:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b450:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b460:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b470:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b480:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b490:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b4a0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b4b0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b4c0:·3d22·2369·646d·3834·3539·2220·7461·6269··="#idm8459"·tabi | |||
| 0003b4d0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b4e0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b4f0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b500:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b510:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b520:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b530:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b540:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b550:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b560:·7073·6522·2069·643d·2269·646d·3834·3539··pse"·id="idm8459 | |||
| 0003b570:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b580:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| Max diff block lines reached; 10017921/10055899 bytes (99.62%) of diff not shown. | |||
| Offset 119, 14 lines modified | Offset 119, 60 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | include·install_aide | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | } | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 147 | if·rpm·--quiet·-q·kernel;·then | ||
| 148 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 149 | ····dnf·install·-y·"aide" | ||
| 150 | fi | ||
| 151 | else | ||
| 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 153 | fi | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·--add=aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | dnf·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Gather·the·package·facts | 171 | -·name:·Gather·the·package·facts |
| 132 | ··package_facts: | 172 | ··package_facts: |
| Offset 166, 60 lines modified | Offset 212, 14 lines modified | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | package·install·aide | 217 | package·install·aide |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel;·then | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 184 | ····dnf·install·-y·"aide" | ||
| 185 | fi | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | dnf·install·aide | ||
| 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 200 | include·install_aide | ||
| 201 | class·install_aide·{ | ||
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 211 | package·--add=aide | ||
| 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 218 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 213 | Run·the·following·command·to·generate·a·new·database: | 219 | Run·the·following·command·to·generate·a·new·database: |
| 214 | $·sudo·/usr/sbin/aide·--init | 220 | $·sudo·/usr/sbin/aide·--init |
| 215 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 221 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 216 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 222 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 217 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 223 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 218 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 224 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 247, 14 lines modified | Offset 247, 28 lines modified | ||
| 247 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 247 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 248 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 248 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 249 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 249 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 250 | ·············_\x8c_\x8i_\x8s············6.1.1 | 250 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 251 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 251 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1127845/1132639 bytes (99.58%) of diff not shown. | |||
| Offset 14773, 205 lines modified | Offset 14773, 205 lines modified | ||
| 00039b40:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | 00039b40:·612d·7461·7267·6574·3d22·2369·646d·3132··a-target="#idm12 | ||
| 00039b50:·3833·3922·2074·6162·696e·6465·783d·2230··839"·tabindex="0 | 00039b50:·3833·3922·2074·6162·696e·6465·783d·2230··839"·tabindex="0 | ||
| 00039b60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00039b60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00039b70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00039b70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00039b80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00039b80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00039b90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00039b90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00039ba0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00039ba0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00039bb0:·6961·7469·6f6e·204 | 00039bb0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00039bc0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00039bd0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00039be0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00039bf0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00039c00:·2069·643d·2269·646d·3132·3833·3922·3e3c···id="idm12839">< | |||
| 00039c10:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039c20:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039bc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00039bd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039be0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039bf0:·6c61·7073·6522·2069·643d·2269·646d·3132··lapse"·id="idm12 | |||
| 00039c00:·3833·3922·3e3c·7461·626c·6520·636c·6173··839"><table·clas | |||
| 00039c10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039c20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039c30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039c40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039c50:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039c60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039c70:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039c80:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039c90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039ca0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00039cb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00039cc0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00039cd0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00039ce0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00039cf0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00039d00:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 00039d10:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039d20:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039d30:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039d40:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039d50:·2d38·3334·3534·2d39·0a20·202d·2065·6e61··-83454-9.··-·ena | |||
| 00039d60:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039d70:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039d80:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039d90:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039da0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039db0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039dc0:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039dd0:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039de0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039 | 00039c30:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | ||
| 00039c40:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039e10:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039e20:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039e30:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039e40:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 00039e50:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 00039e60:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 00039e70:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 00039e80:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 00039e90:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039ea0:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 00039eb0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 00039ec0:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 00039ed0:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 00039ee0:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 00039ef0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 00039f00:·2029·0a20·2074·6167·733a·0a20·202d·2043···).··tags:.··-·C | |||
| 00039f10:·4345·2d38·3334·3534·2d39·0a20·202d·2065··CE-83454-9.··-·e | |||
| 00039f20:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00039f30:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00039f40:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00039f50:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00039f60:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00039f70:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00039f80:·2d20·7061·636b·6167·655f·646e·662d·6175··-·package_dnf-au | |||
| 00039f90:·746f·6d61·7469·635f·696e·7374·616c·6c65··tomatic_installe | |||
| 00039fa0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00039fb0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00039fc0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00039fd0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00039fe0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00039ff0:·6574·3d22·2369·646d·3132·3834·3022·2074··et="#idm12840"·t | |||
| 0003a000:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003a010:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003a020:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003a030:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003a040:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003a050:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003a060:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003a070:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a080:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a090:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a0a0:·3238·3430·223e·3c74·6162·6c65·2063·6c61··2840"><table·cla | |||
| 0003a0b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a0c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a0d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a0e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a0f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a100:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a110:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a120:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a140:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a150:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a160:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a170:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003a180:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003a190:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003a1a0:·6163·6b61·6765·2069·6e73·7461·6c6c·2064··ackage·install·d | |||
| 0003a1b0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | |||
| 0003 | 00039c50:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003 | 00039c60:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003 | 00039c70:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003 | 00039c80:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003 | 00039c90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003 | 00039ca0:·6964·6d31·3238·3430·2220·7461·6269·6e64··idm12840"·tabind | ||
| 0003 | 00039cb0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003 | 00039cc0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003 | 00039cd0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003 | 00039ce0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003 | 00039cf0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003 | 00039d00:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | ||
| 0003a280:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003a290:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a2a0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| Max diff block lines reached; 3405762/3432148 bytes (99.23%) of diff not shown. | |||
| Offset 84, 14 lines modified | Offset 84, 61 lines modified | ||
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 88 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | [[packages]] | ||
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 100 | include·install_dnf-automatic | ||
| 101 | class·install_dnf-automatic·{ | ||
| 102 | ··package·{·'dnf-automatic': | ||
| 103 | ····ensure·=>·'installed', | ||
| 104 | ··} | ||
| 105 | } | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 111 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 112 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 113 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 115 | ····dnf·install·-y·"dnf-automatic" | ||
| 116 | fi | ||
| 117 | else | ||
| 118 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 119 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=dnf-automatic | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | dnf·install·dnf-automatic | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | -·name:·Gather·the·package·facts | 137 | -·name:·Gather·the·package·facts |
| 97 | ··package_facts: | 138 | ··package_facts: |
| Offset 124, 61 lines modified | Offset 171, 14 lines modified | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | package·install·dnf-automatic | 176 | package·install·dnf-automatic |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"dnf-automatic" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 140 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc | ||
| 141 | ;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 142 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | ||
| 143 | ····dnf·install·-y·"dnf-automatic" | ||
| 144 | fi | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | dnf·install·dnf-automatic | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | include·install_dnf-automatic | ||
| 160 | class·install_dnf-automatic·{ | ||
| 161 | ··package·{·'dnf-automatic': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·--add=dnf-automatic | ||
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 172 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 178 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 173 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 179 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 174 | automatic.conf. | 180 | automatic.conf. |
| 175 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 181 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 176 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 182 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 177 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 183 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 189, 14 lines modified | Offset 189, 56 lines modified | ||
| 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 189 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 190 | Identifiers:·CCE-83456-4 | 190 | Identifiers:·CCE-83456-4 |
| 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 191 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| Max diff block lines reached; 243942/249132 bytes (97.92%) of diff not shown. | |||
| Offset 15176, 254 lines modified | Offset 15176, 254 lines modified | ||
| 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b470:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b480:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | 0003b480:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | ||
| 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b490:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4a0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4b0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4c0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4d0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4e0:·5265·6d65·6469·6174·696f·6e20· | 0003b4e0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b4f0:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b500:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b510:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b520:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b530:·3932·3633·223e·3c70·7265·3e3c·636f·6465··9263"><pre><code | |||
| 0003b540:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b550:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b560:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b570:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b580:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b590:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b4f0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b500:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b510:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b520:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b530:·6964·6d39·3236·3322·3e3c·7461·626c·6520··idm9263"><table· | |||
| 0003b540:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b550:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b560:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b570:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b580:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b590:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5a0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5b0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5c0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5d0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5e0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b5f0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b600:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003b610:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003b620:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b630:·6465·3e2d·206e·616d·653a·2058·4343·4446··de>-·name:·XCCDF | |||
| 0003b | 0003b5a0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 0003b | 0003b5b0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 0003b5c0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b5d0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b5e0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b5f0:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b660:·2320·7072·6f6d·6f74·6520·746f·2076·6172··#·promote·to·var | |||
| 0003b670:·6961·626c·650a·2020·7365·745f·6661·6374··iable.··set_fact | |||
| 0003b680:·3a0a·2020·2020·7661·725f·7379·7374·656d··:.····var_system | |||
| 0003b690:·5f63·7279·7074·6f5f·706f·6c69·6379·3a20··_crypto_policy:· | |||
| 0003b6a0:·2121·7374·7220·3c61·6262·7220·7469·746c··!!str·<abbr·titl | |||
| 0003b6b0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b6c0:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b6d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b6e0:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b6 | 0003b600:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | ||
| 0003b610:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b620:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b630:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b640:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b650:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b660:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b670:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b680:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b690:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b6a0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b6b0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b6c0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b6d0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b6e0:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b6f0:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b700:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003b710:·4c54·3c2f·6162·6272·3e0a·2020·7461·6773··LT</abbr>.··tags | |||
| 0003b720:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | |||
| 0003b730:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003b740:·6520·5379·7374·656d·2043·7279·7074·6f67··e·System·Cryptog | |||
| 0003b750:·7261·7068·7920·506f·6c69·6379·0a20·206c··raphy·Policy.··l | |||
| 0003b760:·696e·6569·6e66·696c·653a·0a20·2020·2070··ineinfile:.····p | |||
| 0003b770:·6174·683a·202f·6574·632f·6372·7970·746f··ath:·/etc/crypto | |||
| 0003b780:·2d70·6f6c·6963·6965·732f·636f·6e66·6967··-policies/config | |||
| 0003b790:·0a20·2020·2072·6567·6578·703a·205e·283f··.····regexp:·^(? | |||
| 0003b7a0:·2123·2928·5c53·2b29·240a·2020·2020·6c69··!#)(\S+)$.····li | |||
| 0003b7b0:·6e65·3a20·277b·7b20·7661·725f·7379·7374··ne:·'{{·var_syst | |||
| 0003b7c0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b7d0:·207d·7d27·0a20·2020·2063·7265·6174·653a···}}'.····create: | |||
| 0003b7e0:·2074·7275·650a·2020·7461·6773·3a0a·2020···true.··tags:.·· | |||
| 0003b7f0:·2d20·4343·452d·3833·3435·302d·370a·2020··-·CCE-83450-7.·· | |||
| 0003b800:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b810:·2d30·392d·3231·3531·3035·0a20·202d·2044··-09-215105.··-·D | |||
| 0003b820:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b830:·2d36·3731·3031·300a·2020·2d20·4449·5341··-671010.··-·DISA | |||
| 0003b840:·2d53·5449·472d·5248·454c·2d30·392d·3637··-STIG-RHEL-09-67 | |||
| 0003b850:·3230·3330·0a20·202d·204e·4953·542d·3830··2030.··-·NIST-80 | |||
| 0003b860:·302d·3533·2d41·432d·3137·2832·290a·2020··0-53-AC-17(2).·· | |||
| 0003b870:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 0003b880:·2d31·3728·6129·0a20·202d·204e·4953·542d··-17(a).··-·NIST- | |||
| 0003b890:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b8a0:·202d·204e·4953·542d·3830·302d·3533·2d4d···-·NIST-800-53-M | |||
| 0003b8b0:·412d·3428·3629·0a20·202d·204e·4953·542d··A-4(6).··-·NIST- | |||
| 0003b8c0:·3830·302d·3533·2d53·432d·3132·2832·290a··800-53-SC-12(2). | |||
| 0003b8d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b8e0:·5343·2d31·3228·3329·0a20·202d·204e·4953··SC-12(3).··-·NIS | |||
| 0003b8f0:·542d·3830·302d·3533·2d53·432d·3133·0a20··T-800-53-SC-13.· | |||
| 0003b900:·202d·2050·4349·2d44·5353·7634·2d32·2e32···-·PCI-DSSv4-2.2 | |||
| 0003b910:·0a20·202d·2050·4349·2d44·5353·7634·2d32··.··-·PCI-DSSv4-2 | |||
| 0003b920:·2e32·2e37·0a20·202d·2063·6f6e·6669·6775··.2.7.··-·configu | |||
| 0003b930:·7265·5f63·7279·7074·6f5f·706f·6c69·6379··re_crypto_policy | |||
| 0003b940:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003b950:·7479·0a20·202d·206c·6f77·5f63·6f6d·706c··ty.··-·low_compl | |||
| 0003b960:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b970:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003b980:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b990:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003b9a0:·6567·790a·0a2d·206e·616d·653a·2056·6572··egy..-·name:·Ver | |||
| 0003b9b0:·6966·7920·7468·6174·2043·7279·7074·6f20··ify·that·Crypto· | |||
| 0003b9c0:·506f·6c69·6379·2069·7320·5365·7420·2872··Policy·is·Set·(r | |||
| 0003b9d0:·756e·7469·6d65·290a·2020·636f·6d6d·616e··untime).··comman | |||
| 0003b9e0:·643a·202f·7573·722f·6269·6e2f·7570·6461··d:·/usr/bin/upda | |||
| 0003b | 0003b700:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | ||
| 0003b710:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b720:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b730:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b740:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003b750:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003b760:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003b770:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003b780:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| Max diff block lines reached; 13211372/13245072 bytes (99.75%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 58 lines modified | ||
| 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 108 | ·············_\x8c_\x8i_\x8s······1.6.1 | 108 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | var_system_crypto_policy='DEFAULT' | ||
| 114 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 115 | rc=$? | ||
| 116 | if·test·"$rc"·=·127;·then | ||
| 117 | » echo·"$stderr_of_call"·>&2 | ||
| 118 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 119 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 120 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 121 | » false··#·end·with·an·error·code | ||
| 122 | elif·test·"$rc"·!=·0;·then | ||
| 123 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 124 | » false··#·end·with·an·error·code | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 118 | ··set_fact: | 157 | ··set_fact: |
| Offset 165, 58 lines modified | Offset 209, 14 lines modified | ||
| 165 | ··-·PCI-DSSv4-2.2.7 | 209 | ··-·PCI-DSSv4-2.2.7 |
| 166 | ··-·configure_crypto_policy | 210 | ··-·configure_crypto_policy |
| 167 | ··-·high_severity | 211 | ··-·high_severity |
| 168 | ··-·low_complexity | 212 | ··-·low_complexity |
| 169 | ··-·low_disruption | 213 | ··-·low_disruption |
| 170 | ··-·no_reboot_needed | 214 | ··-·no_reboot_needed |
| 171 | ··-·restrict_strategy | 215 | ··-·restrict_strategy |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 177 | --- | ||
| 178 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 179 | kind:·MachineConfig | ||
| 180 | spec: | ||
| 181 | ··config: | ||
| 182 | ····ignition: | ||
| 183 | ······version:·3.1.0 | ||
| 184 | ····systemd: | ||
| 185 | ······units: | ||
| 186 | ········-·name:·configure-crypto-policy.service | ||
| 187 | ··········enabled:·true | ||
| 188 | ··········contents:·| | ||
| 189 | ············[Unit] | ||
| 190 | ············Before=kubelet.service | ||
| 191 | ············[Service] | ||
| 192 | ············Type=oneshot | ||
| 193 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 194 | ············RemainAfterExit=yes | ||
| 195 | ············[Install] | ||
| 196 | ············WantedBy=multi-user.target | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | var_system_crypto_policy='DEFAULT' | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 213 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 218 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 214 | Severity: ···medium | 219 | Severity: ···medium |
| 215 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 220 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 216 | Identifiers:·CCE-83445-7 | 221 | Identifiers:·CCE-83445-7 |
| 217 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 222 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 227, 14 lines modified | Offset 227, 19 lines modified | ||
| 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 230 | ·············_\x8c_\x8i_\x8s······1.6.2 | 230 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1172250/1177669 bytes (99.54%) of diff not shown. | |||
| Offset 15136, 254 lines modified | Offset 15136, 254 lines modified | ||
| 0003b1f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b1f0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b200:·2223·6964·6d39·3236·3322·2074·6162·696e··"#idm9263"·tabin | 0003b200:·2223·6964·6d39·3236·3322·2074·6162·696e··"#idm9263"·tabin | ||
| 0003b210:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b210:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b220:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b220:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b230:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b230:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b240:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b240:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b250:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b250:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b260:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b260:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b270:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | |||
| 0003b280:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b290:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2a0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2b0:·6d39·3236·3322·3e3c·7072·653e·3c63·6f64··m9263"><pre><cod | |||
| 0003b2c0:·653e·0a76·6172·5f73·7973·7465·6d5f·6372··e>.var_system_cr | |||
| 0003b2d0:·7970·746f·5f70·6f6c·6963·793d·273c·6162··ypto_policy='<ab | |||
| 0003b2e0:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | |||
| 0003b2f0:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | |||
| 0003b300:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | |||
| 0003b310:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | |||
| 0003b270:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b280:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b290:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b2a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b2b0:·2269·646d·3932·3633·223e·3c74·6162·6c65··"idm9263"><table | |||
| 0003b2c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b2d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b2e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b2f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b300:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b330:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b340:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b350:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b360:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b370:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b380:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003b390:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003b3a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b3b0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | |||
| 0003b3 | 0003b320:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003b3 | 0003b330:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003b340:·223e·4445·4641·554c·543c·2f61·6262·723e··">DEFAULT</abbr> | |||
| 0003b350:·270a·0a0a·7374·6465·7272·5f6f·665f·6361··'...stderr_of_ca | |||
| 0003b360:·6c6c·3d24·2875·7064·6174·652d·6372·7970··ll=$(update-cryp | |||
| 0003b370:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b380:·7420·247b·7661·725f·7379·7374·656d·5f63··t·${var_system_c | |||
| 0003b390:·7279·7074·6f5f·706f·6c69·6379·7d20·3226··rypto_policy}·2& | |||
| 0003b3a0:·6774·3b26·616d·703b·3120·2667·743b·202f··gt;&1·>·/ | |||
| 0003b3b0:·6465·762f·6e75·6c6c·290a·7263·3d24·3f0a··dev/null).rc=$?. | |||
| 0003b3c0:·0a69·6620·7465·7374·2022·2472·6322·203d··.if·test·"$rc"·= | |||
| 0003b3d0:·2031·3237·3b20·7468·656e·0a09·6563·686f···127;·then..echo | |||
| 0003b3e0:·2022·2473·7464·6572·725f·6f66·5f63·616c···"$stderr_of_cal | |||
| 0003b3f0:·6c22·2026·6774·3b26·616d·703b·320a·0965··l"·>&2..e | |||
| 0003b400:·6368·6f20·224d·616b·6520·7375·7265·2074··cho·"Make·sure·t | |||
| 0003b410:·6861·7420·7468·6520·7363·7269·7074·2069··hat·the·script·i | |||
| 0003b420:·7320·696e·7374·616c·6c65·6420·6f6e·2074··s·installed·on·t | |||
| 0003b430:·6865·2072·656d·6564·6961·7465·6420·7379··he·remediated·sy | |||
| 0003b440:·7374·656d·2e22·2026·6774·3b26·616d·703b··stem."·>& | |||
| 0003b450:·320a·0965·6368·6f20·2253·6565·206f·7574··2..echo·"See·out | |||
| 0003b460:·7075·7420·6f66·2074·6865·2027·646e·6620··put·of·the·'dnf· | |||
| 0003b470:·7072·6f76·6964·6573·2075·7064·6174·652d··provides·update- | |||
| 0003b480:·6372·7970·746f·2d70·6f6c·6963·6965·7327··crypto-policies' | |||
| 0003b490:·2063·6f6d·6d61·6e64·2220·2667·743b·2661···command"·>&a | |||
| 0003b4a0:·6d70·3b32·0a09·6563·686f·2022·746f·2073··mp;2..echo·"to·s | |||
| 0003b4b0:·6565·2077·6861·7420·7061·636b·6167·6520··ee·what·package· | |||
| 0003b4c0:·746f·2028·7265·2969·6e73·7461·6c6c·2220··to·(re)install"· | |||
| 0003b4d0:·2667·743b·2661·6d70·3b32·0a0a·0966·616c··>&2...fal | |||
| 0003b4e0:·7365·2020·2320·656e·6420·7769·7468·2061··se··#·end·with·a | |||
| 0003b4f0:·6e20·6572·726f·7220·636f·6465·0a65·6c69··n·error·code.eli | |||
| 0003b500:·6620·7465·7374·2022·2472·6322·2021·3d20··f·test·"$rc"·!=· | |||
| 0003b510:·303b·2074·6865·6e0a·0965·6368·6f20·2245··0;·then..echo·"E | |||
| 0003b520:·7272·6f72·2069·6e76·6f6b·696e·6720·7468··rror·invoking·th | |||
| 0003b530:·6520·7570·6461·7465·2d63·7279·7074·6f2d··e·update-crypto- | |||
| 0003b540:·706f·6c69·6369·6573·2073·6372·6970·743a··policies·script: | |||
| 0003b550:·2024·7374·6465·7272·5f6f·665f·6361·6c6c···$stderr_of_call | |||
| 0003b560:·2220·2667·743b·2661·6d70·3b32·0a09·6661··"·>&2..fa | |||
| 0003b570:·6c73·6520·2023·2065·6e64·2077·6974·6820··lse··#·end·with· | |||
| 0003b580:·616e·2065·7272·6f72·2063·6f64·650a·6669··an·error·code.fi | |||
| 0003b590:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b5a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b5b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b5c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b5d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b5e0:·743d·2223·6964·6d39·3236·3522·2074·6162··t="#idm9265"·tab | |||
| 0003b5f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b600:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b610:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b620:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b630:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b640:·2122·3e52·656d·6564·6961·7469·6f6e·204b··!">Remediation·K | |||
| 0003b650:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003b660:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b670:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b680:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b690:·2220·6964·3d22·6964·6d39·3236·3522·3e3c··"·id="idm9265">< | |||
| 0003b6a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b6b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b6c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b6d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b6e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b6f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b700:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b710:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b720:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b730:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b740:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003b750:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b760:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b770:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | |||
| 0003b780:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b790:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003b7a0:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003b7b0:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003b7c0:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003b7d0:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003b7e0:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003b7f0:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003b800:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003b810:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003b820:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003b830:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003b840:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003b850:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003b860:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003b870:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003b880:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| Max diff block lines reached; 9027595/9061295 bytes (99.63%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 58 lines modified | ||
| 97 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 97 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 98 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 98 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 99 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 99 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 100 | ·············_\x8c_\x8i_\x8s······1.6.1 | 100 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 101 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 101 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | var_system_crypto_policy='DEFAULT' | ||
| 106 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 107 | rc=$? | ||
| 108 | if·test·"$rc"·=·127;·then | ||
| 109 | » echo·"$stderr_of_call"·>&2 | ||
| 110 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 111 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 112 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 113 | » false··#·end·with·an·error·code | ||
| 114 | elif·test·"$rc"·!=·0;·then | ||
| 115 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 116 | » false··#·end·with·an·error·code | ||
| 117 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 123 | --- | ||
| 124 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 125 | kind:·MachineConfig | ||
| 126 | spec: | ||
| 127 | ··config: | ||
| 128 | ····ignition: | ||
| 129 | ······version:·3.1.0 | ||
| 130 | ····systemd: | ||
| 131 | ······units: | ||
| 132 | ········-·name:·configure-crypto-policy.service | ||
| 133 | ··········enabled:·true | ||
| 134 | ··········contents:·| | ||
| 135 | ············[Unit] | ||
| 136 | ············Before=kubelet.service | ||
| 137 | ············[Service] | ||
| 138 | ············Type=oneshot | ||
| 139 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 140 | ············RemainAfterExit=yes | ||
| 141 | ············[Install] | ||
| 142 | ············WantedBy=multi-user.target | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 148 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 110 | ··set_fact: | 149 | ··set_fact: |
| Offset 157, 58 lines modified | Offset 201, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-2.2.7 | 201 | ··-·PCI-DSSv4-2.2.7 |
| 158 | ··-·configure_crypto_policy | 202 | ··-·configure_crypto_policy |
| 159 | ··-·high_severity | 203 | ··-·high_severity |
| 160 | ··-·low_complexity | 204 | ··-·low_complexity |
| 161 | ··-·low_disruption | 205 | ··-·low_disruption |
| 162 | ··-·no_reboot_needed | 206 | ··-·no_reboot_needed |
| 163 | ··-·restrict_strategy | 207 | ··-·restrict_strategy |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 169 | --- | ||
| 170 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 171 | kind:·MachineConfig | ||
| 172 | spec: | ||
| 173 | ··config: | ||
| 174 | ····ignition: | ||
| 175 | ······version:·3.1.0 | ||
| 176 | ····systemd: | ||
| 177 | ······units: | ||
| 178 | ········-·name:·configure-crypto-policy.service | ||
| 179 | ··········enabled:·true | ||
| 180 | ··········contents:·| | ||
| 181 | ············[Unit] | ||
| 182 | ············Before=kubelet.service | ||
| 183 | ············[Service] | ||
| 184 | ············Type=oneshot | ||
| 185 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 186 | ············RemainAfterExit=yes | ||
| 187 | ············[Install] | ||
| 188 | ············WantedBy=multi-user.target | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 190 | var_system_crypto_policy='DEFAULT' | ||
| 191 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 192 | rc=$? | ||
| 193 | if·test·"$rc"·=·127;·then | ||
| 194 | » echo·"$stderr_of_call"·>&2 | ||
| 195 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 196 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 197 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 198 | » false··#·end·with·an·error·code | ||
| 199 | elif·test·"$rc"·!=·0;·then | ||
| 200 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 201 | » false··#·end·with·an·error·code | ||
| 202 | fi | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 209 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 205 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 210 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 206 | Severity: ···medium | 211 | Severity: ···medium |
| 207 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 212 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 208 | Identifiers:·CCE-83445-7 | 213 | Identifiers:·CCE-83445-7 |
| 209 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 214 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 219, 14 lines modified | Offset 219, 19 lines modified | ||
| 219 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 219 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 221 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 221 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 222 | ·············_\x8c_\x8i_\x8s······1.6.2 | 222 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 223 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 223 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 224 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 224 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 878283/883700 bytes (99.39%) of diff not shown. | |||
| Offset 15177, 254 lines modified | Offset 15177, 254 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | 0003b490:·2369·646d·3932·3633·2220·7461·6269·6e64··#idm9263"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20· | 0003b4f0:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | ||
| 0003b500:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 0003b510:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b520:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b530:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b540:·3932·3633·223e·3c70·7265·3e3c·636f·6465··9263"><pre><code | |||
| 0003b550:·3e0a·7661·725f·7379·7374·656d·5f63·7279··>.var_system_cry | |||
| 0003b560:·7074·6f5f·706f·6c69·6379·3d27·3c61·6262··pto_policy='<abb | |||
| 0003b570:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | |||
| 0003b580:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | |||
| 0003b590:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | |||
| 0003b5a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | |||
| 0003b500:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d39·3236·3322·3e3c·7461·626c·6520··idm9263"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b5c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b5d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b5f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b600:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b610:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003b620:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003b630:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b640:·6465·3e2d·206e·616d·653a·2058·4343·4446··de>-·name:·XCCDF | |||
| 0003b | 0003b5b0:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 0003b | 0003b5c0:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 0003b5d0:·3e44·4546·4155·4c54·3c2f·6162·6272·3e27··>DEFAULT</abbr>' | |||
| 0003b5e0:·0a0a·0a73·7464·6572·725f·6f66·5f63·616c··...stderr_of_cal | |||
| 0003b5f0:·6c3d·2428·7570·6461·7465·2d63·7279·7074··l=$(update-crypt | |||
| 0003b600:·6f2d·706f·6c69·6369·6573·202d·2d73·6574··o-policies·--set | |||
| 0003b670:·2320·7072·6f6d·6f74·6520·746f·2076·6172··#·promote·to·var | |||
| 0003b680:·6961·626c·650a·2020·7365·745f·6661·6374··iable.··set_fact | |||
| 0003b690:·3a0a·2020·2020·7661·725f·7379·7374·656d··:.····var_system | |||
| 0003b6a0:·5f63·7279·7074·6f5f·706f·6c69·6379·3a20··_crypto_policy:· | |||
| 0003b6b0:·2121·7374·7220·3c61·6262·7220·7469·746c··!!str·<abbr·titl | |||
| 0003b6c0:·653d·2266·726f·6d20·5072·6f66·696c·652f··e="from·Profile/ | |||
| 0003b6d0:·7265·6669·6e65·2d76·616c·7565·3a20·7863··refine-value:·xc | |||
| 0003b6e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | |||
| 0003b6f0:·6374·2e63·6f6e·7465·6e74·5f76·616c·7565··ct.content_value | |||
| 0003b | 0003b610:·2024·7b76·6172·5f73·7973·7465·6d5f·6372···${var_system_cr | ||
| 0003b620:·7970·746f·5f70·6f6c·6963·797d·2032·2667··ypto_policy}·2&g | |||
| 0003b630:·743b·2661·6d70·3b31·2026·6774·3b20·2f64··t;&1·>·/d | |||
| 0003b640:·6576·2f6e·756c·6c29·0a72·633d·243f·0a0a··ev/null).rc=$?.. | |||
| 0003b650:·6966·2074·6573·7420·2224·7263·2220·3d20··if·test·"$rc"·=· | |||
| 0003b660:·3132·373b·2074·6865·6e0a·0965·6368·6f20··127;·then..echo· | |||
| 0003b670:·2224·7374·6465·7272·5f6f·665f·6361·6c6c··"$stderr_of_call | |||
| 0003b680:·2220·2667·743b·2661·6d70·3b32·0a09·6563··"·>&2..ec | |||
| 0003b690:·686f·2022·4d61·6b65·2073·7572·6520·7468··ho·"Make·sure·th | |||
| 0003b6a0:·6174·2074·6865·2073·6372·6970·7420·6973··at·the·script·is | |||
| 0003b6b0:·2069·6e73·7461·6c6c·6564·206f·6e20·7468···installed·on·th | |||
| 0003b6c0:·6520·7265·6d65·6469·6174·6564·2073·7973··e·remediated·sys | |||
| 0003b6d0:·7465·6d2e·2220·2667·743b·2661·6d70·3b32··tem."·>&2 | |||
| 0003b6e0:·0a09·6563·686f·2022·5365·6520·6f75·7470··..echo·"See·outp | |||
| 0003b6f0:·7574·206f·6620·7468·6520·2764·6e66·2070··ut·of·the·'dnf·p | |||
| 0003b700:·726f·7669·6465·7320·7570·6461·7465·2d63··rovides·update-c | |||
| 0003b710:·746f·5f70·6f6c·6963·7922·3e44·4546·4155··to_policy">DEFAU | |||
| 0003b720:·4c54·3c2f·6162·6272·3e0a·2020·7461·6773··LT</abbr>.··tags | |||
| 0003b730:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | |||
| 0003b740:·2d20·6e61·6d65·3a20·436f·6e66·6967·7572··-·name:·Configur | |||
| 0003b750:·6520·5379·7374·656d·2043·7279·7074·6f67··e·System·Cryptog | |||
| 0003b760:·7261·7068·7920·506f·6c69·6379·0a20·206c··raphy·Policy.··l | |||
| 0003b770:·696e·6569·6e66·696c·653a·0a20·2020·2070··ineinfile:.····p | |||
| 0003b780:·6174·683a·202f·6574·632f·6372·7970·746f··ath:·/etc/crypto | |||
| 0003b790:·2d70·6f6c·6963·6965·732f·636f·6e66·6967··-policies/config | |||
| 0003b7a0:·0a20·2020·2072·6567·6578·703a·205e·283f··.····regexp:·^(? | |||
| 0003b7b0:·2123·2928·5c53·2b29·240a·2020·2020·6c69··!#)(\S+)$.····li | |||
| 0003b7c0:·6e65·3a20·277b·7b20·7661·725f·7379·7374··ne:·'{{·var_syst | |||
| 0003b7d0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 0003b7e0:·207d·7d27·0a20·2020·2063·7265·6174·653a···}}'.····create: | |||
| 0003b7f0:·2074·7275·650a·2020·7461·6773·3a0a·2020···true.··tags:.·· | |||
| 0003b800:·2d20·4343·452d·3833·3435·302d·370a·2020··-·CCE-83450-7.·· | |||
| 0003b810:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b820:·2d30·392d·3231·3531·3035·0a20·202d·2044··-09-215105.··-·D | |||
| 0003b830:·4953·412d·5354·4947·2d52·4845·4c2d·3039··ISA-STIG-RHEL-09 | |||
| 0003b840:·2d36·3731·3031·300a·2020·2d20·4449·5341··-671010.··-·DISA | |||
| 0003b850:·2d53·5449·472d·5248·454c·2d30·392d·3637··-STIG-RHEL-09-67 | |||
| 0003b860:·3230·3330·0a20·202d·204e·4953·542d·3830··2030.··-·NIST-80 | |||
| 0003b870:·302d·3533·2d41·432d·3137·2832·290a·2020··0-53-AC-17(2).·· | |||
| 0003b880:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 0003b890:·2d31·3728·6129·0a20·202d·204e·4953·542d··-17(a).··-·NIST- | |||
| 0003b8a0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b8b0:·202d·204e·4953·542d·3830·302d·3533·2d4d···-·NIST-800-53-M | |||
| 0003b8c0:·412d·3428·3629·0a20·202d·204e·4953·542d··A-4(6).··-·NIST- | |||
| 0003b8d0:·3830·302d·3533·2d53·432d·3132·2832·290a··800-53-SC-12(2). | |||
| 0003b8e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b8f0:·5343·2d31·3228·3329·0a20·202d·204e·4953··SC-12(3).··-·NIS | |||
| 0003b900:·542d·3830·302d·3533·2d53·432d·3133·0a20··T-800-53-SC-13.· | |||
| 0003b910:·202d·2050·4349·2d44·5353·7634·2d32·2e32···-·PCI-DSSv4-2.2 | |||
| 0003b920:·0a20·202d·2050·4349·2d44·5353·7634·2d32··.··-·PCI-DSSv4-2 | |||
| 0003b930:·2e32·2e37·0a20·202d·2063·6f6e·6669·6775··.2.7.··-·configu | |||
| 0003b940:·7265·5f63·7279·7074·6f5f·706f·6c69·6379··re_crypto_policy | |||
| 0003b950:·0a20·202d·2068·6967·685f·7365·7665·7269··.··-·high_severi | |||
| 0003b960:·7479·0a20·202d·206c·6f77·5f63·6f6d·706c··ty.··-·low_compl | |||
| 0003b970:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b980:·7372·7570·7469·6f6e·0a20·202d·206e·6f5f··sruption.··-·no_ | |||
| 0003b990:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b9a0:·2d20·7265·7374·7269·6374·5f73·7472·6174··-·restrict_strat | |||
| 0003b9b0:·6567·790a·0a2d·206e·616d·653a·2056·6572··egy..-·name:·Ver | |||
| 0003b9c0:·6966·7920·7468·6174·2043·7279·7074·6f20··ify·that·Crypto· | |||
| 0003b9d0:·506f·6c69·6379·2069·7320·5365·7420·2872··Policy·is·Set·(r | |||
| 0003b9e0:·756e·7469·6d65·290a·2020·636f·6d6d·616e··untime).··comman | |||
| 0003b9f0:·643a·202f·7573·722f·6269·6e2f·7570·6461··d:·/usr/bin/upda | |||
| 0003b | 0003b710:·7279·7074·6f2d·706f·6c69·6369·6573·2720··rypto-policies'· | ||
| 0003b720:·636f·6d6d·616e·6422·2026·6774·3b26·616d··command"·>&am | |||
| 0003b730:·703b·320a·0965·6368·6f20·2274·6f20·7365··p;2..echo·"to·se | |||
| 0003b740:·6520·7768·6174·2070·6163·6b61·6765·2074··e·what·package·t | |||
| 0003b750:·6f20·2872·6529·696e·7374·616c·6c22·2026··o·(re)install"·& | |||
| 0003b760:·6774·3b26·616d·703b·320a·0a09·6661·6c73··gt;&2...fals | |||
| 0003b770:·6520·2023·2065·6e64·2077·6974·6820·616e··e··#·end·with·an | |||
| 0003b780:·2065·7272·6f72·2063·6f64·650a·656c·6966···error·code.elif | |||
| 0003b790:·2074·6573·7420·2224·7263·2220·213d·2030···test·"$rc"·!=·0 | |||
| Max diff block lines reached; 10344330/10378030 bytes (99.68%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 58 lines modified | ||
| 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 105 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 107 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 108 | ·············_\x8c_\x8i_\x8s······1.6.1 | 108 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 113 | var_system_crypto_policy='DEFAULT' | ||
| 114 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 115 | rc=$? | ||
| 116 | if·test·"$rc"·=·127;·then | ||
| 117 | » echo·"$stderr_of_call"·>&2 | ||
| 118 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 119 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 120 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 121 | » false··#·end·with·an·error·code | ||
| 122 | elif·test·"$rc"·!=·0;·then | ||
| 123 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 124 | » false··#·end·with·an·error·code | ||
| 125 | fi | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 117 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 118 | ··set_fact: | 157 | ··set_fact: |
| Offset 165, 58 lines modified | Offset 209, 14 lines modified | ||
| 165 | ··-·PCI-DSSv4-2.2.7 | 209 | ··-·PCI-DSSv4-2.2.7 |
| 166 | ··-·configure_crypto_policy | 210 | ··-·configure_crypto_policy |
| 167 | ··-·high_severity | 211 | ··-·high_severity |
| 168 | ··-·low_complexity | 212 | ··-·low_complexity |
| 169 | ··-·low_disruption | 213 | ··-·low_disruption |
| 170 | ··-·no_reboot_needed | 214 | ··-·no_reboot_needed |
| 171 | ··-·restrict_strategy | 215 | ··-·restrict_strategy |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 177 | --- | ||
| 178 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 179 | kind:·MachineConfig | ||
| 180 | spec: | ||
| 181 | ··config: | ||
| 182 | ····ignition: | ||
| 183 | ······version:·3.1.0 | ||
| 184 | ····systemd: | ||
| 185 | ······units: | ||
| 186 | ········-·name:·configure-crypto-policy.service | ||
| 187 | ··········enabled:·true | ||
| 188 | ··········contents:·| | ||
| 189 | ············[Unit] | ||
| 190 | ············Before=kubelet.service | ||
| 191 | ············[Service] | ||
| 192 | ············Type=oneshot | ||
| 193 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 194 | ············RemainAfterExit=yes | ||
| 195 | ············[Install] | ||
| 196 | ············WantedBy=multi-user.target | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 198 | var_system_crypto_policy='DEFAULT' | ||
| 199 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 200 | rc=$? | ||
| 201 | if·test·"$rc"·=·127;·then | ||
| 202 | » echo·"$stderr_of_call"·>&2 | ||
| 203 | » echo·"Make·sure·that·the·script·is·installed·on·the·remediated·system."·>&2 | ||
| 204 | » echo·"See·output·of·the·'dnf·provides·update-crypto-policies'·command"·>&2 | ||
| 205 | » echo·"to·see·what·package·to·(re)install"·>&2 | ||
| 206 | » false··#·end·with·an·error·code | ||
| 207 | elif·test·"$rc"·!=·0;·then | ||
| 208 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | ||
| 209 | » false··#·end·with·an·error·code | ||
| 210 | fi | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 216 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 217 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 213 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 218 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 214 | Severity: ···medium | 219 | Severity: ···medium |
| 215 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 220 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 216 | Identifiers:·CCE-83445-7 | 221 | Identifiers:·CCE-83445-7 |
| 217 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 222 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 227, 14 lines modified | Offset 227, 19 lines modified | ||
| 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 | 227 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s···Req-2.2 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000250-GPOS-00093 |
| 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 | 229 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL6 |
| 230 | ·············_\x8c_\x8i_\x8s······1.6.2 | 230 | ·············_\x8c_\x8i_\x8s······1.6.2 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-255075 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-257991r1051246_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1073010/1078429 bytes (99.50%) of diff not shown. | |||
| Offset 15165, 284 lines modified | Offset 15165, 284 lines modified | ||
| 0003b3c0:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | 0003b3c0:·6574·3d22·2369·646d·3834·3538·2220·7461··et="#idm8458"·ta | ||
| 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b3d0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b3e0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b3f0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b400:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b410:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b420:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b430:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b440:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b450:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b460:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b470:·6964·3d22·6964·6d38·3435·3822·3e3c·7461··id="idm8458"><ta | |||
| 0003b480:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b490:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4a0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b4b0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b4c0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b4d0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b4e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b4 | 0003b430:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b440:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b450:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b460:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b470:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b480:·6d38·3435·3822·3e3c·7072·653e·3c63·6f64··m8458"><pre><cod | |||
| 0003b490:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b4a0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b4b0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b4c0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b4d0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b4e0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b4f0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b500:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b510:·646d·3834·3539·2220·7461·6269·6e64·6578··dm8459"·tabindex | |||
| 0003b520:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b530:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b540:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b550:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b560:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b570:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b5c0:·3834·3539·223e·3c74·6162·6c65·2063·6c61··8459"><table·cla | |||
| 0003b5d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b600:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b610:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003b620:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b510:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003b630:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003b640:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b53 | 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b660:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b670:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b680:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b690:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b6a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b6b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b6c0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b6d0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b6e0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b6f0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b700:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b710:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b540:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b550:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b560:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b570:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0003b580:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0003b590:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0003b5a0:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0003b5b0:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0003b5c0:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b5d0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b5e0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b5f0:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b600:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b610:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b620:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b630:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b640:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b650:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b660:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b670:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b680:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b690:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6a0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6b0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b6c0:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 0003b6d0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b6e0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b6f0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b700:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b710:·2077·6865·6e3a·2027·226b·6572·6e65·6c22···when:·'"kernel" | |||
| 0003b720:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b730:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b740:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b750:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b760:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b770:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b780:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b790:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b7a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b7b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b7c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b7d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b7e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b7f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b800:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b810:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b820:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b830:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b | 0003b720:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003b | 0003b730:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003b | 0003b740:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003b | 0003b750:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003b | 0003b760:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b | 0003b770:·743d·2223·6964·6d38·3436·3022·2074·6162··t="#idm8460"·tab | ||
| 0003b780:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b790:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b7a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b7b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b7c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b7d0:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| Max diff block lines reached; 26234406/26272246 bytes (99.86%) of diff not shown. | |||
| Offset 15126, 284 lines modified | Offset 15126, 284 lines modified | ||
| 0003b150:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b150:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b160:·6964·6d38·3435·3822·2074·6162·696e·6465··idm8458"·tabinde | 0003b160:·6964·6d38·3435·3822·2074·6162·696e·6465··idm8458"·tabinde | ||
| 0003b170:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b170:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b180:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b180:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b190:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b190:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b1a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b1a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b1b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b1b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b1c0:·656d·6564·6961·7469·6f6e·204 | 0003b1c0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b1d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b1d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b1e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b1f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b200:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b210:·646d·3834·3538·223e·3c74·6162·6c65·2063··dm8458"><table·c | |||
| 0003b220:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b230:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b240:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b250:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b260:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b270:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b280:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b290:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b2a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b2c0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b2d0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b2e0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b2f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b300:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b310:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b320:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b330:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b340:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b350:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b360:·4343·452d·3930·3834·332d·340a·2020·2d20··CCE-90843-4.··-· | |||
| 0003b370:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b380:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003b390:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003b3a0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b3b0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b3c0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b3d0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b3e0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b3f0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b400:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b410:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b420:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b430:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b440:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b450:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b460:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b470:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b480:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b490:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b4a0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b4b0:·3a20·2722·6b65·726e·656c·2220·696e·2061··:·'"kernel"·in·a | |||
| 0003b4c0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b4d0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b4e0:·202d·2043·4345·2d39·3038·3433·2d34·0a20···-·CCE-90843-4.· | |||
| 0003b4f0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b500:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b510:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b520:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b530:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b540:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b550:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b560:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b570:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b580:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b590:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b5a0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b5b0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b5c0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b5d0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b5e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b5f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b600:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b610:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b620:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b630:·2369·646d·3834·3539·2220·7461·6269·6e64··#idm8459"·tabind | |||
| 0003b640:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b650:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b660:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b670:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b680:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b690:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b6a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b6b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b6c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b6d0:·6522·2069·643d·2269·646d·3834·3539·223e··e"·id="idm8459"> | |||
| 0003b6e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b6f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b700:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b710:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b720:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b730:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b740:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b750:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b760:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b770:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b780:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b790:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b7a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b7b0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b7c0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b7d0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b7e0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b7f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b800:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b810:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b820:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b830:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b840:·2369·646d·3834·3630·2220·7461·6269·6e64··#idm8460"·tabind | |||
| 0003b850:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b860:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b870:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b880:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b890:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b8a0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b8b0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b8c0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b8d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b8e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8f0:·6170·7365·2220·6964·3d22·6964·6d38·3436··apse"·id="idm846 | |||
| 0003b900:·3022·3e3c·7072·653e·3c63·6f64·653e·0a5b··0"><pre><code>.[ | |||
| 0003b910:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b920:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| Max diff block lines reached; 11729512/11767352 bytes (99.68%) of diff not shown. | |||
| Offset 106, 14 lines modified | Offset 106, 60 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | include·install_aide | ||
| 123 | class·install_aide·{ | ||
| 124 | ··package·{·'aide': | ||
| 125 | ····ensure·=>·'installed', | ||
| 126 | ··} | ||
| 127 | } | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 134 | if·rpm·--quiet·-q·kernel;·then | ||
| 135 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 136 | ····dnf·install·-y·"aide" | ||
| 137 | fi | ||
| 138 | else | ||
| 139 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 140 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | dnf·install·aide | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 119 | ··package_facts: | 159 | ··package_facts: |
| Offset 153, 60 lines modified | Offset 199, 14 lines modified | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | package·install·aide | 204 | package·install·aide |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 169 | if·rpm·--quiet·-q·kernel;·then | ||
| 170 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 171 | ····dnf·install·-y·"aide" | ||
| 172 | fi | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | dnf·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | include·install_aide | ||
| 188 | class·install_aide·{ | ||
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 198 | package·--add=aide | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 204 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 205 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 227, 14 lines modified | Offset 227, 28 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 229 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 230 | ·············_\x8c_\x8i_\x8s············6.1.1 | 230 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 231 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1367879/1372822 bytes (99.64%) of diff not shown. | |||
| Offset 15118, 284 lines modified | Offset 15118, 284 lines modified | ||
| 0003b0d0:·6765·743d·2223·6964·6d38·3435·3822·2074··get="#idm8458"·t | 0003b0d0:·6765·743d·2223·6964·6d38·3435·3822·2074··get="#idm8458"·t | ||
| 0003b0e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b0e0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b0f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b0f0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b100:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b100:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b110:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b110:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b120:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b120:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b130:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b130:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b140:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b150:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b160:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b170:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b1 | 0003b140:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b150:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b160:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b170:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b180:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b190:·646d·3834·3538·223e·3c70·7265·3e3c·636f··dm8458"><pre><co | |||
| 0003b1a0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b1b0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b1c0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b1d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b1 | 0003b1e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b1a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b1b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b1c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b1d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b1e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b1f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b1f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b200:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b220:·6964·6d38·3435·3922·2074·6162·696e·6465··idm8459"·tabinde | |||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b280:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b290:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b2a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b2b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b2c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b2d0:·6d38·3435·3922·3e3c·7461·626c·6520·636c··m8459"><table·cl | |||
| 0003b2e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b2f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b300:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b310:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b320:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003b330:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b220:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b340:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003b350:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003b360:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b370:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b380:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b390:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b3a0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b250:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b260:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b270:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b280:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b290:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b2a0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b2b0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b2c0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b2d0:·3a0a·2020·2d20·4343·452d·3930·3834·332d··:.··-·CCE-90843- | |||
| 0003b2e0:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003b2f0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b300:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b310:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b320:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b330:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b340:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b350:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b360:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b370:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b380:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b390:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b3a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b3b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b3c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b3d0:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b3e0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b3f0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b400:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b410:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b420:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b430:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b440:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b450:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 0003b460:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 0003b470:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b480:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b490:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b4a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b4b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b4c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b4d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b4e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b4f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b500:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b510:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b520:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b530:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b540:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b550:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b560:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b570:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b580:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b590:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b5a0:·7267·6574·3d22·2369·646d·3834·3539·2220··rget="#idm8459"· | |||
| 0003b5b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b5c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b5d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b5e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b5f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b600:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b610:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003b620:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b630:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b640:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b650:·3834·3539·223e·3c74·6162·6c65·2063·6c61··8459"><table·cla | |||
| 0003b660:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b670:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b680:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b690:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b6a0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| Max diff block lines reached; 11336731/11374571 bytes (99.67%) of diff not shown. | |||
| Offset 105, 14 lines modified | Offset 105, 60 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r1045265_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | include·install_aide | ||
| 122 | class·install_aide·{ | ||
| 123 | ··package·{·'aide': | ||
| 124 | ····ensure·=>·'installed', | ||
| 125 | ··} | ||
| 126 | } | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·rpm·--quiet·-q·kernel;·then | ||
| 134 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 135 | ····dnf·install·-y·"aide" | ||
| 136 | fi | ||
| 137 | else | ||
| 138 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 139 | fi | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·--add=aide | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | dnf·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Gather·the·package·facts | 157 | -·name:·Gather·the·package·facts |
| 118 | ··package_facts: | 158 | ··package_facts: |
| Offset 152, 60 lines modified | Offset 198, 14 lines modified | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | package·install·aide | 203 | package·install·aide |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 168 | if·rpm·--quiet·-q·kernel;·then | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | ||
| 170 | ····dnf·install·-y·"aide" | ||
| 171 | fi | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | dnf·install·aide | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | include·install_aide | ||
| 187 | class·install_aide·{ | ||
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | package·--add=aide | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 226, 14 lines modified | Offset 226, 28 lines modified | ||
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 227 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 227 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 228 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 228 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 229 | ·············_\x8c_\x8i_\x8s············6.1.1 | 229 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| Max diff block lines reached; 1313943/1318886 bytes (99.63%) of diff not shown. | |||
| Offset 15156, 284 lines modified | Offset 15156, 284 lines modified | ||
| 0003b330:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b330:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b340:·646d·3834·3538·2220·7461·6269·6e64·6578··dm8458"·tabindex | 0003b340:·646d·3834·3538·2220·7461·6269·6e64·6578··dm8458"·tabindex | ||
| 0003b350:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b350:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b360:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b360:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b370:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b370:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b380:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b380:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b390:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b390:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b3a0:·6d65·6469·6174·696f·6e20·4 | 0003b3a0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b3b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b3c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b3d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b3e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b3f0:·6d38·3435·3822·3e3c·7461·626c·6520·636c··m8458"><table·cl | |||
| 0003b400:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b410:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b420:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b430:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b440:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b3b0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b3c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3f0:·7365·2220·6964·3d22·6964·6d38·3435·3822··se"·id="idm8458" | |||
| 0003b400:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b410:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b420:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b430:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b440:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b450:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b460:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b470:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b480:·7461·7267·6574·3d22·2369·646d·3834·3539··target="#idm8459 | |||
| 0003b490:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b4a0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b4b0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b4c0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b4d0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4e0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4f0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b500:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b510:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b520:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b530:·6522·2069·643d·2269·646d·3834·3539·223e··e"·id="idm8459"> | |||
| 0003b540:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b550:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b560:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b570:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b580:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b590:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b5a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b490:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b4a0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b5b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b5c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003b5e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b5f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b600:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b610:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b620:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b630:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b4d0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b4e0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b4f0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b500:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b510:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b520:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0003b530:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 0003b540:·4345·2d39·3038·3433·2d34·0a20·202d·2043··CE-90843-4.··-·C | |||
| 0003b550:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b560:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003b570:·3039·2d36·3531·3031·300a·2020·2d20·4e49··09-651010.··-·NI | |||
| 0003b580:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b590:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b5a0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b5b0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b5c0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b5d0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b5e0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b5f0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b600:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b610:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b620:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b630:·696e·7374·616c·6c65·640a·0a2d·206e·616d··installed..-·nam | |||
| 0003b640:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b650:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b660:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b670:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b680:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b690:·2027·226b·6572·6e65·6c22·2069·6e20·616e···'"kernel"·in·an | |||
| 0003b6a0:·7369·626c·655f·6661·6374·732e·7061·636b··sible_facts.pack | |||
| 0003b6b0:·6167·6573·270a·2020·7461·6773·3a0a·2020··ages'.··tags:.·· | |||
| 0003b6c0:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b6d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b6e0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b6f0:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b700:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b710:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b720:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b730:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b740:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b750:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b760:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b770:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b780:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b790:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b7a0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b7b0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b7c0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7d0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b7e0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b7f0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b800:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b810:·6964·6d38·3435·3922·2074·6162·696e·6465··idm8459"·tabinde | |||
| 0003b820:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b830:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b840:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b850:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b860:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b870:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003b880:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b890:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b8a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b8b0:·2220·6964·3d22·6964·6d38·3435·3922·3e3c··"·id="idm8459">< | |||
| 0003b8c0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b8d0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| Max diff block lines reached; 26025087/26062927 bytes (99.85%) of diff not shown. | |||
| Offset 15843, 253 lines modified | Offset 15843, 253 lines modified | ||
| 0003de20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003de20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003de30:·6964·6d39·3136·3922·2074·6162·696e·6465··idm9169"·tabinde | 0003de30:·6964·6d39·3136·3922·2074·6162·696e·6465··idm9169"·tabinde | ||
| 0003de40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003de40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003de50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003de50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003de60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003de60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003de70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003de70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003de80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003de80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003de90:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003dea0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003deb0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003dec0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ded0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003dee0:·646d·3931·3639·223e·3c74·6162·6c65·2063··dm9169"><table·c | |||
| 0003def0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003df00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003df10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003df20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003df30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003df40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003df50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003df60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003df70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003df80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003df90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003dfa0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003dfb0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003dfc0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003dfd0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003dfe0:·2d20·6e61·6d65·3a20·456e·7375·7265·2063··-·name:·Ensure·c | |||
| 0003dff0:·7279·7074·6f2d·706f·6c69·6369·6573·2069··rypto-policies·i | |||
| 0003e000:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003e010:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003e020:·2063·7279·7074·6f2d·706f·6c69·6369·6573···crypto-policies | |||
| 0003e030:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003e040:·656e·740a·2020·7461·6773·3a0a·2020·2d20··ent.··tags:.··-· | |||
| 0003e050:·4343·452d·3833·3434·322d·340a·2020·2d20··CCE-83442-4.··-· | |||
| 0003e060:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003e070:·392d·3231·3531·3030·0a20·202d·2065·6e61··9-215100.··-·ena | |||
| 0003e080:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003e090:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003e0a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003e0b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003e0c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003e0d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003e0e0:·7061·636b·6167·655f·6372·7970·746f·2d70··package_crypto-p | |||
| 0003e0f0:·6f6c·6963·6965·735f·696e·7374·616c·6c65··olicies_installe | |||
| 0003e100:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003e110:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003e120:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003e130:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003e140:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003e150:·6574·3d22·2369·646d·3931·3730·2220·7461··et="#idm9170"·ta | |||
| 0003e160:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003e170:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003e180:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003e190:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003e1a0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003e1b0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003e1c0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003e1d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003e1e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003e1f0:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003e200:·3730·223e·3c74·6162·6c65·2063·6c61·7373··70"><table·class | |||
| 0003e210:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003e220:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003e230:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003e240:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003e250:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003e260:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003e270:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003e280:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003e290:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003e2a0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003e2b0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003e2c0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003e2d0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003e2e0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003e2f0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003e300:·6b61·6765·2069·6e73·7461·6c6c·2063·7279··kage·install·cry | |||
| 0003e310:·7074·6f2d·706f·6c69·6369·6573·0a3c·2f63··pto-policies.</c | |||
| 0003e320:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003e330:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003e340:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003e350:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003e360:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003e370:·6964·6d39·3137·3122·2074·6162·696e·6465··idm9171"·tabinde | |||
| 0003e380:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003e390:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003e3a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003e3b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003e3c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003 | 0003de90:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003 | 0003dea0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003 | 0003deb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003dec0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003ded0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003dee0:·7073·6522·2069·643d·2269·646d·3931·3639··pse"·id="idm9169 | ||
| 0003 | 0003def0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003 | 0003df00:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | ||
| 0003 | 0003df10:·3d20·2263·7279·7074·6f2d·706f·6c69·6369··=·"crypto-polici | ||
| 0003 | 0003df20:·6573·220a·7665·7273·696f·6e20·3d20·222a··es".version·=·"* | ||
| 0003 | 0003df30:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0003 | 0003df40:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003 | 0003df50:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003 | 0003df60:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003 | 0003df70:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003 | 0003df80:·6574·3d22·2369·646d·3931·3730·2220·7461··et="#idm9170"·ta | ||
| 0003 | 0003df90:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003 | 0003dfa0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003 | 0003dfb0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003 | 0003dfc0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003 | 0003dfd0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003 | 0003dfe0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003 | 0003dff0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | ||
| 0003e | 0003e000:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003e | 0003e010:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003e | 0003e020:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003e | 0003e030:·643d·2269·646d·3931·3730·223e·3c74·6162··d="idm9170"><tab | ||
| 0003e | 0003e040:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0003e | 0003e050:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0003e | 0003e060:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0003e | 0003e070:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0003e | 0003e080:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0003e | 0003e090:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003e | 0003e0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003e | 0003e0b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003e | 0003e0c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| Max diff block lines reached; 6869525/6903087 bytes (99.51%) of diff not shown. | |||
| Offset 158, 79 lines modified | Offset 158, 79 lines modified | ||
| 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 158 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 159 | Identifiers:·CCE-83442-4 | 159 | Identifiers:·CCE-83442-4 |
| 160 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 160 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 161 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 161 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 162 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 162 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 163 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 | 163 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 |
| 164 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 164 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | -·name:·Ensure·crypto-policies·is·installed | ||
| 171 | ··package: | ||
| 172 | ····name:·crypto-policies | ||
| 173 | ····state:·present | ||
| 174 | ··tags: | ||
| 175 | ··-·CCE-83442-4 | ||
| 176 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 177 | ··-·enable_strategy | ||
| 178 | ··-·low_complexity | ||
| 179 | ··-·low_disruption | ||
| 180 | ··-·medium_severity | ||
| 181 | ··-·no_reboot_needed | ||
| 182 | ··-·package_crypto-policies_installed | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 188 | package·install·crypto-policies | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | [[packages]] | 166 | [[packages]] |
| 191 | name·=·"crypto-policies" | 167 | name·=·"crypto-policies" |
| 192 | version·=·"*" | 168 | version·=·"*" |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_crypto-policies | ||
| 175 | class·install_crypto-policies·{ | ||
| 176 | ··package·{·'crypto-policies': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 185 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 199 | ····dnf·install·-y·"crypto-policies" | 186 | ····dnf·install·-y·"crypto-policies" |
| 200 | fi | 187 | fi |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 193 | package·--add=crypto-policies | ||
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 206 | dnf·install·crypto-policies | 199 | dnf·install·crypto-policies |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 212 | include·install_crypto-policies | ||
| 213 | class·install_crypto-policies·{ | ||
| 214 | ··package·{·'crypto-policies': | ||
| 215 | ····ensure·=>·'installed', | ||
| 216 | ··} | ||
| 217 | 205 | -·name:·Ensure·crypto-policies·is·installed | |
| 206 | ··package: | ||
| 207 | ····name:·crypto-policies | ||
| 208 | ····state:·present | ||
| 209 | ··tags: | ||
| 210 | ··-·CCE-83442-4 | ||
| 211 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 212 | ··-·enable_strategy | ||
| 213 | ··-·low_complexity | ||
| 214 | ··-·low_disruption | ||
| 215 | ··-·medium_severity | ||
| 216 | ··-·no_reboot_needed | ||
| 217 | ··-·package_crypto-policies_installed | ||
| 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 223 | package· | 223 | package·install·crypto-policies |
| 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 224 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 225 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: | 225 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS·policy,·run·the·following·command: |
| 226 | $·sudo·update-crypto-policies·--set·FIPS | 226 | $·sudo·update-crypto-policies·--set·FIPS |
| 227 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 227 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 228 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 228 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 229 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 229 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 230 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 230 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 245, 14 lines modified | Offset 245, 58 lines modified | ||
| 245 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 245 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 246 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 246 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 247 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 247 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 248 | ·············_\x8c_\x8i_\x8s······1.6.1 | 248 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 249 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 249 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 250 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 250 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 251 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 251 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 252 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 253 | var_system_crypto_policy='FIPS' | ||
| 254 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 255 | rc=$? | ||
| 256 | if·test·"$rc"·=·127;·then | ||
| Max diff block lines reached; 915779/924041 bytes (99.11%) of diff not shown. | |||
| Offset 15183, 414 lines modified | Offset 15183, 414 lines modified | ||
| 0003b4e0:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | 0003b4e0:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | ||
| 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b4f0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b500:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b510:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b520:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b530:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b540:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b550:·696f·6e20· | 0003b550:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b560:· | 0003b560:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b570:· | 0003b570:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b580:· | 0003b580:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b590:· | 0003b590:·2069·643d·2269·646d·3831·3135·223e·3c70···id="idm8115"><p | ||
| 0003b5a0:· | 0003b5a0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b5b0:·6 | 0003b5b0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b5c0:·6 | 0003b5c0:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b5d0:· | 0003b5d0:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003b5e0:·6 | 0003b5e0:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003b5f0:·6 | 0003b5f0:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003b600:·6 | 0003b600:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b610:· | 0003b610:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003b620:· | 0003b620:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003b630:·2 | 0003b630:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b640:· | 0003b640:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003b650:· | 0003b650:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003b660:· | 0003b660:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003b670:· | 0003b670:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003b680:· | 0003b680:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003b690:·6 | 0003b690:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003b6a0:· | 0003b6a0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003b6b0:· | 0003b6b0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003b6c0:·20 | 0003b6c0:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003b6d0:· | 0003b6d0:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003b6e0:· | 0003b6e0:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003b6f0:· | 0003b6f0:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003b700:· | 0003b700:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003b710:· | 0003b710:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003b720:· | 0003b720:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003b730:· | 0003b730:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003b740:· | 0003b740:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003b750:· | 0003b750:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003b760:· | 0003b760:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003b770:· | 0003b770:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b780:· | 0003b780:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003b790:· | 0003b790:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003b7a0:· | 0003b7a0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003b7b0:· | 0003b7b0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003b7c0:· | 0003b7c0:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003b7d0:· | 0003b7d0:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003b7e0:· | 0003b7e0:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003b7f0:· | 0003b7f0:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003b800:· | 0003b800:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003b810:·6 | 0003b810:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003b820:·7 | 0003b820:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003b830:· | 0003b830:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003b840:· | 0003b840:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003b850:· | 0003b850:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | ||
| 0003b860:· | 0003b860:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003b870:· | 0003b870:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003b880:· | 0003b880:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003b890:· | 0003b890:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003b8a0:·6 | 0003b8a0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003b8b0:·3 | 0003b8b0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003b8c0:· | 0003b8c0:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003b8d0:·6 | 0003b8d0:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003b8e0:· | 0003b8e0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003b8f0:· | 0003b8f0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003b900:· | 0003b900:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003b910:· | 0003b910:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003b920:· | 0003b920:·2d74·6172·6765·743d·2223·6964·6d38·3131··-target="#idm811 | ||
| 0003b930:· | 0003b930:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b940:· | 0003b940:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b950:·6 | 0003b950:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b960:· | 0003b960:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b970:·61 | 0003b970:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b980:·66 | 0003b980:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b990:· | 0003b990:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003b9a0:· | 0003b9a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b9b0:· | 0003b9b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b9c0:· | 0003b9c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b9d0:· | 0003b9d0:·7073·6522·2069·643d·2269·646d·3831·3136··pse"·id="idm8116 | ||
| 0003b9e0:· | 0003b9e0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003b9f0:· | 0003b9f0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003ba00:· | 0003ba00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003ba10:· | 0003ba10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003ba20:· | 0003ba20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003ba30:· | 0003ba30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003ba40:· | 0003ba40:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003ba50:· | 0003ba50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003ba60:· | 0003ba60:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003ba70:· | 0003ba70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003ba80:· | 0003ba80:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003ba90:·43 | 0003ba90:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003baa0:· | 0003baa0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bab0:· | 0003bab0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bac0:· | 0003bac0:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bad0:· | 0003bad0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bae0:·2 | 0003bae0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003baf0:· | 0003baf0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003bb00:· | 0003bb00:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003bb10:· | 0003bb10:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003bb20:· | 0003bb20:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003bb30:· | 0003bb30:·4343·452d·3930·3834·312d·380a·2020·2d20··CCE-90841-8.··-· | ||
| 0003bb40:· | 0003bb40:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bb50:· | 0003bb50:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bb60:· | 0003bb60:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bb70:· | 0003bb70:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bb80:· | 0003bb80:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bb90:· | 0003bb90:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bba0:· | 0003bba0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bbb0:· | 0003bbb0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bbc0:· | 0003bbc0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bbd0:·2 | 0003bbd0:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bbe0:· | 0003bbe0:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bbf0:· | 0003bbf0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc00:·2d | 0003bc00:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bc10:· | 0003bc10:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bc20:·2 | 0003bc20:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bc30:· | 0003bc30:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bc40:· | 0003bc40:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bc50:· | 0003bc50:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bc60:·6 | 0003bc60:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bc70:· | 0003bc70:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bc80:·6 | 0003bc80:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bc90:· | 0003bc90:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bca0:·6 | 0003bca0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bcb0:· | 0003bcb0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| Max diff block lines reached; 6846157/6901937 bytes (99.19%) of diff not shown. | |||
| Offset 104, 14 lines modified | Offset 104, 33 lines modified | ||
| 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 104 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 105 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 113 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 114 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 115 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 116 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 117 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 118 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 119 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 120 | fi | ||
| 121 | else | ||
| 122 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 123 | fi | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 116 | -·name:·Gather·the·package·facts | 129 | -·name:·Gather·the·package·facts |
| 117 | ··package_facts: | 130 | ··package_facts: |
| Offset 284, 33 lines modified | Offset 303, 14 lines modified | ||
| 284 | ··-·PCI-DSSv4-11.5.2 | 303 | ··-·PCI-DSSv4-11.5.2 |
| 285 | ··-·high_complexity | 304 | ··-·high_complexity |
| 286 | ··-·high_severity | 305 | ··-·high_severity |
| 287 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 288 | ··-·no_reboot_needed | 307 | ··-·no_reboot_needed |
| 289 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 290 | ··-·rpm_verify_hashes | 309 | ··-·rpm_verify_hashes |
| 291 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 292 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 293 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 294 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 295 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 296 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 297 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 298 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 299 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 300 | fi | ||
| 301 | else | ||
| 302 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 303 | fi | ||
| 304 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 305 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 306 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 307 | run·the·following·command·to·determine·which·package·owns·it: | 313 | run·the·following·command·to·determine·which·package·owns·it: |
| 308 | $·rpm·-qf·FILENAME | 314 | $·rpm·-qf·FILENAME |
| 309 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 310 | $·sudo·rpm·--restore·PACKAGENAME | 316 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 330, 14 lines modified | Offset 330, 46 lines modified | ||
| 330 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 330 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 331 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 331 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 332 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 332 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 333 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 333 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 334 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 334 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 335 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 336 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 336 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 342 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 343 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 344 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 345 | declare·-A·SETPERMS_RPM_DICT | ||
| 346 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 347 | #·is·expected·by·the·RPM·database | ||
| 348 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 349 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 350 | do | ||
| 351 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 352 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 353 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 354 | done | ||
| 355 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 356 | #·correct·values | ||
| 357 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 358 | do | ||
| 359 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 360 | done | ||
| 361 | else | ||
| 362 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 363 | fi | ||
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 338 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 339 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 340 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 341 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 342 | -·name:·Gather·the·package·facts | 369 | -·name:·Gather·the·package·facts |
| 343 | ··package_facts: | 370 | ··package_facts: |
| Offset 449, 46 lines modified | Offset 481, 14 lines modified | ||
| 449 | ··-·PCI-DSSv4-11.5.2 | 481 | ··-·PCI-DSSv4-11.5.2 |
| 450 | ··-·high_complexity | 482 | ··-·high_complexity |
| 451 | ··-·high_severity | 483 | ··-·high_severity |
| 452 | ··-·medium_disruption | 484 | ··-·medium_disruption |
| 453 | ··-·no_reboot_needed | 485 | ··-·no_reboot_needed |
| 454 | ··-·restrict_strategy | 486 | ··-·restrict_strategy |
| 455 | ··-·rpm_verify_ownership | 487 | ··-·rpm_verify_ownership |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 734093/741818 bytes (98.96%) of diff not shown. | |||
| Offset 15204, 414 lines modified | Offset 15204, 414 lines modified | ||
| 0003b630:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | 0003b630:·7461·7267·6574·3d22·2369·646d·3831·3135··target="#idm8115 | ||
| 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b640:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b650:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b660:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b670:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b680:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b690:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b6a0:·696f·6e20· | 0003b6a0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b6b0:· | 0003b6b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b6c0:· | 0003b6c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b6d0:· | 0003b6d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b6e0:· | 0003b6e0:·2069·643d·2269·646d·3831·3135·223e·3c70···id="idm8115"><p | ||
| 0003b6f0:· | 0003b6f0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b700:·6 | 0003b700:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b710:·6 | 0003b710:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b720:· | 0003b720:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003b730:·6 | 0003b730:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003b740:·6 | 0003b740:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003b750:·6 | 0003b750:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b760:· | 0003b760:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003b770:· | 0003b770:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003b780:·2 | 0003b780:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b790:· | 0003b790:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003b7a0:· | 0003b7a0:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003b7b0:· | 0003b7b0:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003b7c0:· | 0003b7c0:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003b7d0:· | 0003b7d0:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003b7e0:·6 | 0003b7e0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003b7f0:· | 0003b7f0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003b800:· | 0003b800:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003b810:·20 | 0003b810:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003b820:· | 0003b820:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003b830:· | 0003b830:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003b840:· | 0003b840:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003b850:· | 0003b850:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003b860:· | 0003b860:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003b870:· | 0003b870:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003b880:· | 0003b880:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003b890:· | 0003b890:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003b8a0:· | 0003b8a0:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003b8b0:· | 0003b8b0:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003b8c0:· | 0003b8c0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b8d0:· | 0003b8d0:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003b8e0:· | 0003b8e0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003b8f0:· | 0003b8f0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003b900:· | 0003b900:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003b910:· | 0003b910:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003b920:· | 0003b920:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003b930:· | 0003b930:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003b940:· | 0003b940:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003b950:· | 0003b950:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003b960:·6 | 0003b960:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003b970:·7 | 0003b970:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003b980:· | 0003b980:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003b990:· | 0003b990:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003b9a0:· | 0003b9a0:·2020·200a·2020·2020·646e·6620·7265·696e·····.····dnf·rein | ||
| 0003b9b0:· | 0003b9b0:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003b9c0:· | 0003b9c0:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003b9d0:· | 0003b9d0:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003b9e0:· | 0003b9e0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003b9f0:·6 | 0003b9f0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003ba00:·3 | 0003ba00:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003ba10:· | 0003ba10:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003ba20:·6 | 0003ba20:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003ba30:· | 0003ba30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003ba40:· | 0003ba40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003ba50:· | 0003ba50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003ba60:· | 0003ba60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003ba70:· | 0003ba70:·2d74·6172·6765·743d·2223·6964·6d38·3131··-target="#idm811 | ||
| 0003ba80:· | 0003ba80:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003ba90:· | 0003ba90:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003baa0:·6 | 0003baa0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bab0:· | 0003bab0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bac0:·61 | 0003bac0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bad0:·66 | 0003bad0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bae0:· | 0003bae0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003baf0:· | 0003baf0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003bb00:· | 0003bb00:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003bb10:· | 0003bb10:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003bb20:· | 0003bb20:·7073·6522·2069·643d·2269·646d·3831·3136··pse"·id="idm8116 | ||
| 0003bb30:· | 0003bb30:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003bb40:· | 0003bb40:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003bb50:· | 0003bb50:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003bb60:· | 0003bb60:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003bb70:· | 0003bb70:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003bb80:· | 0003bb80:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003bb90:· | 0003bb90:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003bba0:· | 0003bba0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bbb0:· | 0003bbb0:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003bbc0:· | 0003bbc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bbd0:· | 0003bbd0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003bbe0:·43 | 0003bbe0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003bbf0:· | 0003bbf0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bc00:· | 0003bc00:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bc10:· | 0003bc10:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bc20:· | 0003bc20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bc30:·2 | 0003bc30:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003bc40:· | 0003bc40:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003bc50:· | 0003bc50:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003bc60:· | 0003bc60:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003bc70:· | 0003bc70:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003bc80:· | 0003bc80:·4343·452d·3930·3834·312d·380a·2020·2d20··CCE-90841-8.··-· | ||
| 0003bc90:· | 0003bc90:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bca0:· | 0003bca0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bcb0:· | 0003bcb0:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bcc0:· | 0003bcc0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bcd0:· | 0003bcd0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bce0:· | 0003bce0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bcf0:· | 0003bcf0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bd00:· | 0003bd00:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bd10:· | 0003bd10:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bd20:·2 | 0003bd20:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bd30:· | 0003bd30:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bd40:· | 0003bd40:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bd50:·2d | 0003bd50:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bd60:· | 0003bd60:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bd70:·2 | 0003bd70:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bd80:· | 0003bd80:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bd90:· | 0003bd90:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bda0:· | 0003bda0:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bdb0:·6 | 0003bdb0:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bdc0:· | 0003bdc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bdd0:·6 | 0003bdd0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bde0:· | 0003bde0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bdf0:·6 | 0003bdf0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003be00:· | 0003be00:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| Max diff block lines reached; 17360240/17416020 bytes (99.68%) of diff not shown. | |||
| Offset 109, 14 lines modified | Offset 109, 33 lines modified | ||
| 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 109 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 110 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 111 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 112 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 118 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 119 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 120 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 121 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 122 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 123 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 124 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 125 | fi | ||
| 126 | else | ||
| 127 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 128 | fi | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 121 | -·name:·Gather·the·package·facts | 134 | -·name:·Gather·the·package·facts |
| 122 | ··package_facts: | 135 | ··package_facts: |
| Offset 289, 33 lines modified | Offset 308, 14 lines modified | ||
| 289 | ··-·PCI-DSSv4-11.5.2 | 308 | ··-·PCI-DSSv4-11.5.2 |
| 290 | ··-·high_complexity | 309 | ··-·high_complexity |
| 291 | ··-·high_severity | 310 | ··-·high_severity |
| 292 | ··-·medium_disruption | 311 | ··-·medium_disruption |
| 293 | ··-·no_reboot_needed | 312 | ··-·no_reboot_needed |
| 294 | ··-·restrict_strategy | 313 | ··-·restrict_strategy |
| 295 | ··-·rpm_verify_hashes | 314 | ··-·rpm_verify_hashes |
| 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 297 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 298 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 299 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 300 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 301 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 302 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 303 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 304 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 305 | fi | ||
| 306 | else | ||
| 307 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 308 | fi | ||
| 309 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 315 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 310 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 316 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 311 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 317 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 312 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 318 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 313 | $·rpm·-qf·FILENAME | 319 | $·rpm·-qf·FILENAME |
| 314 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 320 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 337, 14 lines modified | Offset 337, 50 lines modified | ||
| 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 349 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 350 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 351 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 352 | declare·-A·SETPERMS_RPM_DICT | ||
| 353 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 354 | #·is·expected·by·the·RPM·database | ||
| 355 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 356 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 357 | do | ||
| 358 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 359 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 360 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 361 | ········do | ||
| 362 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 363 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 364 | ········done | ||
| 365 | done | ||
| 366 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 367 | #·correct·values | ||
| 368 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 369 | do | ||
| 370 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 371 | done | ||
| 372 | else | ||
| 373 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 374 | fi | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 375 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 376 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 377 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 378 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 379 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Gather·the·package·facts | 380 | -·name:·Gather·the·package·facts |
| 350 | ··package_facts: | 381 | ··package_facts: |
| Offset 460, 50 lines modified | Offset 496, 14 lines modified | ||
| 460 | ··-·PCI-DSSv4-11.5.2 | 496 | ··-·PCI-DSSv4-11.5.2 |
| 461 | ··-·high_complexity | 497 | ··-·high_complexity |
| 462 | ··-·high_severity | 498 | ··-·high_severity |
| 463 | ··-·medium_disruption | 499 | ··-·medium_disruption |
| 464 | ··-·no_reboot_needed | 500 | ··-·no_reboot_needed |
| 465 | ··-·restrict_strategy | 501 | ··-·restrict_strategy |
| 466 | ··-·rpm_verify_permissions | 502 | ··-·rpm_verify_permissions |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1286297/1294395 bytes (99.37%) of diff not shown. | |||
| Offset 15217, 414 lines modified | Offset 15217, 414 lines modified | ||
| 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b700:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b710:·6d38·3131·3522·2074·6162·696e·6465·783d··m8115"·tabindex= | 0003b710:·6d38·3131·3522·2074·6162·696e·6465·783d··m8115"·tabindex= | ||
| 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b720:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b730:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b740:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b750:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b760:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b770:·6564·6961·7469·6f6e·20 | 0003b770:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b780:· | 0003b780:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b790:·3 | 0003b790:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b7a0:· | 0003b7a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b7b0:·6 | 0003b7b0:·6170·7365·2220·6964·3d22·6964·6d38·3131··apse"·id="idm811 | ||
| 0003b7c0:·3 | 0003b7c0:·3522·3e3c·7072·653e·3c63·6f64·653e·2320··5"><pre><code>#· | ||
| 0003b7d0:· | 0003b7d0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b7e0:·7 | 0003b7e0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b7f0:· | 0003b7f0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b800:· | 0003b800:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b810:· | 0003b810:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b820:· | 0003b820:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b830:· | 0003b830:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b840:·7 | 0003b840:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b850:· | 0003b850:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b860:· | 0003b860:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b870:·6 | 0003b870:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b880:· | 0003b880:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b890:· | 0003b890:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b8a0:·65 | 0003b8a0:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b8b0:· | 0003b8b0:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b8c0:·6 | 0003b8c0:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b8d0:·6 | 0003b8d0:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b8e0:· | 0003b8e0:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b8f0:·6 | 0003b8f0:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b900:·7 | 0003b900:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b910:·2 | 0003b910:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b920:· | 0003b920:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b930:· | 0003b930:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b940:· | 0003b940:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b950:· | 0003b950:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b960:· | 0003b960:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b970:· | 0003b970:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b980:·2 | 0003b980:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b990:· | 0003b990:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b9a0:· | 0003b9a0:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b9b0:· | 0003b9b0:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b9c0:· | 0003b9c0:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b9d0:· | 0003b9d0:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b9e0:· | 0003b9e0:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b9f0:· | 0003b9f0:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003ba00:· | 0003ba00:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003ba10:· | 0003ba10:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003ba20:·6 | 0003ba20:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003ba30:· | 0003ba30:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003ba40:· | 0003ba40:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003ba50:·6 | 0003ba50:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003ba60:· | 0003ba60:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003ba70:· | 0003ba70:·2922·0a0a·2020·2020·0a20·2020·2064·6e66··)"..····.····dnf | ||
| 0003ba80:·2 | 0003ba80:·2072·6569·6e73·7461·6c6c·202d·7920·2470···reinstall·-y·$p | ||
| 0003ba90:·6 | 0003ba90:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003baa0:·74 | 0003baa0:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003bab0:· | 0003bab0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003bac0:· | 0003bac0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003bad0:· | 0003bad0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003bae0:·6 | 0003bae0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003baf0:· | 0003baf0:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003bb00:·6 | 0003bb00:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003bb10:·6 | 0003bb10:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003bb20:· | 0003bb20:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003bb30:· | 0003bb30:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003bb40:· | 0003bb40:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003bb50:· | 0003bb50:·646d·3831·3136·2220·7461·6269·6e64·6578··dm8116"·tabindex | ||
| 0003bb60:· | 0003bb60:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003bb70:·6e | 0003bb70:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003bb80:· | 0003bb80:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003bb90:· | 0003bb90:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003bba0:·6 | 0003bba0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003bbb0:· | 0003bbb0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003bbc0:· | 0003bbc0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003bbd0:· | 0003bbd0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bbe0:· | 0003bbe0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bbf0:· | 0003bbf0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bc00:· | 0003bc00:·6d38·3131·3622·3e3c·7461·626c·6520·636c··m8116"><table·cl | ||
| 0003bc10:·61 | 0003bc10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003bc20:· | 0003bc20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003bc30:· | 0003bc30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003bc40:· | 0003bc40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003bc50:·3 | 0003bc50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003bc60:· | 0003bc60:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003bc70:· | 0003bc70:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003bc80:· | 0003bc80:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003bc90:· | 0003bc90:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003bca0:· | 0003bca0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003bcb0:· | 0003bcb0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003bcc0:· | 0003bcc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003bcd0:· | 0003bcd0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bce0:· | 0003bce0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003bcf0:· | 0003bcf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003bd00:· | 0003bd00:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003bd10:· | 0003bd10:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003bd20:· | 0003bd20:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003bd30:·6 | 0003bd30:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003bd40:· | 0003bd40:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003bd50:· | 0003bd50:·0a20·202d·2043·4345·2d39·3038·3431·2d38··.··-·CCE-90841-8 | ||
| 0003bd60:· | 0003bd60:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003bd70:· | 0003bd70:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003bd80:· | 0003bd80:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bd90:· | 0003bd90:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bda0:· | 0003bda0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bdb0:· | 0003bdb0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bdc0:· | 0003bdc0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bdd0:· | 0003bdd0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bde0:· | 0003bde0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003bdf0:· | 0003bdf0:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003be00:· | 0003be00:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003be10:· | 0003be10:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003be20:· | 0003be20:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003be30:·2 | 0003be30:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003be40:· | 0003be40:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003be50:· | 0003be50:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003be60:· | 0003be60:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003be70:· | 0003be70:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003be80:· | 0003be80:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003be90:· | 0003be90:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003bea0:· | 0003bea0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003beb0:·7 | 0003beb0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bec0:· | 0003bec0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003bed0:· | 0003bed0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| Max diff block lines reached; 10202417/10258197 bytes (99.46%) of diff not shown. | |||
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 111 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 112 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 113 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 114 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 120 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 121 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 122 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 123 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 124 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 125 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 126 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 127 | fi | ||
| 128 | else | ||
| 129 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 130 | fi | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 123 | -·name:·Gather·the·package·facts | 136 | -·name:·Gather·the·package·facts |
| 124 | ··package_facts: | 137 | ··package_facts: |
| Offset 291, 33 lines modified | Offset 310, 14 lines modified | ||
| 291 | ··-·PCI-DSSv4-11.5.2 | 310 | ··-·PCI-DSSv4-11.5.2 |
| 292 | ··-·high_complexity | 311 | ··-·high_complexity |
| 293 | ··-·high_severity | 312 | ··-·high_severity |
| 294 | ··-·medium_disruption | 313 | ··-·medium_disruption |
| 295 | ··-·no_reboot_needed | 314 | ··-·no_reboot_needed |
| 296 | ··-·restrict_strategy | 315 | ··-·restrict_strategy |
| 297 | ··-·rpm_verify_hashes | 316 | ··-·rpm_verify_hashes |
| 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 299 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 300 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 301 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 302 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 303 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 304 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 305 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 306 | ····dnf·reinstall·-y·$packages_to_reinstall | ||
| 307 | fi | ||
| 308 | else | ||
| 309 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 310 | fi | ||
| 311 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 317 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 312 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 318 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 313 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 319 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 314 | run·the·following·command·to·determine·which·package·owns·it: | 320 | run·the·following·command·to·determine·which·package·owns·it: |
| 315 | $·rpm·-qf·FILENAME | 321 | $·rpm·-qf·FILENAME |
| 316 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 322 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 317 | $·sudo·rpm·--restore·PACKAGENAME | 323 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 337, 14 lines modified | Offset 337, 46 lines modified | ||
| 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 337 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 338 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 339 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 340 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 341 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 342 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 343 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 349 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 350 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 351 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 352 | declare·-A·SETPERMS_RPM_DICT | ||
| 353 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 354 | #·is·expected·by·the·RPM·database | ||
| 355 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 356 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 357 | do | ||
| 358 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 359 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 360 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 361 | done | ||
| 362 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 363 | #·correct·values | ||
| 364 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 365 | do | ||
| 366 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 367 | done | ||
| 368 | else | ||
| 369 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 370 | fi | ||
| 344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 372 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 373 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 374 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 375 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 349 | -·name:·Gather·the·package·facts | 376 | -·name:·Gather·the·package·facts |
| 350 | ··package_facts: | 377 | ··package_facts: |
| Offset 456, 46 lines modified | Offset 488, 14 lines modified | ||
| 456 | ··-·PCI-DSSv4-11.5.2 | 488 | ··-·PCI-DSSv4-11.5.2 |
| 457 | ··-·high_complexity | 489 | ··-·high_complexity |
| 458 | ··-·high_severity | 490 | ··-·high_severity |
| 459 | ··-·medium_disruption | 491 | ··-·medium_disruption |
| 460 | ··-·no_reboot_needed | 492 | ··-·no_reboot_needed |
| 461 | ··-·restrict_strategy | 493 | ··-·restrict_strategy |
| 462 | ··-·rpm_verify_ownership | 494 | ··-·rpm_verify_ownership |
| 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1039140/1046865 bytes (99.26%) of diff not shown. | |||
| Offset 15811, 253 lines modified | Offset 15811, 253 lines modified | ||
| 0003dc20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003dc20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003dc30:·2369·646d·3931·3639·2220·7461·6269·6e64··#idm9169"·tabind | 0003dc30:·2369·646d·3931·3639·2220·7461·6269·6e64··#idm9169"·tabind | ||
| 0003dc40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003dc40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003dc50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003dc50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003dc60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003dc60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003dc70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003dc70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003dc80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003dc80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003dc90:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003dca0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003dcb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003dcc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003dcd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003dce0:·6964·6d39·3136·3922·3e3c·7461·626c·6520··idm9169"><table· | |||
| 0003dcf0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003dd00:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003dd10:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003dd20:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003dd30:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003dd40:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003dd50:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003dd60:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003dd70:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003dd80:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003dd90:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003dda0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003ddb0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003ddc0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003ddd0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003dde0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003ddf0:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 0003de00:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003de10:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003de20:·3a20·6372·7970·746f·2d70·6f6c·6963·6965··:·crypto-policie | |||
| 0003de30:·730a·2020·2020·7374·6174·653a·2070·7265··s.····state:·pre | |||
| 0003de40:·7365·6e74·0a20·2074·6167·733a·0a20·202d··sent.··tags:.··- | |||
| 0003de50:·2043·4345·2d38·3334·3432·2d34·0a20·202d···CCE-83442-4.··- | |||
| 0003de60:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003de70:·3039·2d32·3135·3130·300a·2020·2d20·656e··09-215100.··-·en | |||
| 0003de80:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003de90:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003dea0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003deb0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003dec0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ded0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003dee0:·2070·6163·6b61·6765·5f63·7279·7074·6f2d···package_crypto- | |||
| 0003def0:·706f·6c69·6369·6573·5f69·6e73·7461·6c6c··policies_install | |||
| 0003df00:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003df10:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003df20:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003df30:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003df40:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003df50:·6765·743d·2223·6964·6d39·3137·3022·2074··get="#idm9170"·t | |||
| 0003df60:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003df70:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003df80:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003df90:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003dfa0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003dfb0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003dfc0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003dfd0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003dfe0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003dff0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003e000:·3137·3022·3e3c·7461·626c·6520·636c·6173··170"><table·clas | |||
| 0003e010:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003e020:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003e030:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003e040:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003e050:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003e060:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003e070:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003e080:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003e090:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003e0a0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003e0b0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003e0c0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003e0d0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003e0e0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003e0f0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003e100:·636b·6167·6520·696e·7374·616c·6c20·6372··ckage·install·cr | |||
| 0003e110:·7970·746f·2d70·6f6c·6963·6965·730a·3c2f··ypto-policies.</ | |||
| 0003e120:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003e130:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003e140:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003e150:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003e160:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003e170:·2369·646d·3931·3731·2220·7461·6269·6e64··#idm9171"·tabind | |||
| 0003e180:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003e190:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003e1a0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003e1b0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003e1c0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003 | 0003dc90:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003 | 0003dca0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003 | 0003dcb0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003 | 0003dcc0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003 | 0003dcd0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003 | 0003dce0:·6170·7365·2220·6964·3d22·6964·6d39·3136··apse"·id="idm916 | ||
| 0003 | 0003dcf0:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | ||
| 0003 | 0003dd00:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | ||
| 0003 | 0003dd10:·203d·2022·6372·7970·746f·2d70·6f6c·6963···=·"crypto-polic | ||
| 0003 | 0003dd20:·6965·7322·0a76·6572·7369·6f6e·203d·2022··ies".version·=·" | ||
| 0003 | 0003dd30:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003 | 0003dd40:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003 | 0003dd50:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003 | 0003dd60:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003 | 0003dd70:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003 | 0003dd80:·6765·743d·2223·6964·6d39·3137·3022·2074··get="#idm9170"·t | ||
| 0003 | 0003dd90:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003 | 0003dda0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003 | 0003ddb0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003 | 0003ddc0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003 | 0003ddd0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003 | 0003dde0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003 | 0003ddf0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | ||
| 0003 | 0003de00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003 | 0003de10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003e | 0003de20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003e3 | 0003de30:·6964·3d22·6964·6d39·3137·3022·3e3c·7461··id="idm9170"><ta | ||
| 0003 | 0003de40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003e | 0003de50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003 | 0003de60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003 | 0003de70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003 | 0003de80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003 | 0003de90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003 | 0003dea0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003 | 0003deb0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0003e | 0003dec0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| Max diff block lines reached; 6867938/6901500 bytes (99.51%) of diff not shown. | |||
| Offset 149, 79 lines modified | Offset 149, 79 lines modified | ||
| 149 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 149 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 150 | Identifiers:·CCE-83442-4 | 150 | Identifiers:·CCE-83442-4 |
| 151 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 | 151 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-002890,·CCI-002450,·CCI-003123 |
| 152 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 152 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 153 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 | 154 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-215100 |
| 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule | 155 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r1051250_rule |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | -·name:·Ensure·crypto-policies·is·installed | ||
| 162 | ··package: | ||
| 163 | ····name:·crypto-policies | ||
| 164 | ····state:·present | ||
| 165 | ··tags: | ||
| 166 | ··-·CCE-83442-4 | ||
| 167 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 168 | ··-·enable_strategy | ||
| 169 | ··-·low_complexity | ||
| 170 | ··-·low_disruption | ||
| 171 | ··-·medium_severity | ||
| 172 | ··-·no_reboot_needed | ||
| 173 | ··-·package_crypto-policies_installed | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·install·crypto-policies | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 181 | [[packages]] | 157 | [[packages]] |
| 182 | name·=·"crypto-policies" | 158 | name·=·"crypto-policies" |
| 183 | version·=·"*" | 159 | version·=·"*" |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | include·install_crypto-policies | ||
| 166 | class·install_crypto-policies·{ | ||
| 167 | ··package·{·'crypto-policies': | ||
| 168 | ····ensure·=>·'installed', | ||
| 169 | ··} | ||
| 170 | } | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 176 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 190 | ····dnf·install·-y·"crypto-policies" | 177 | ····dnf·install·-y·"crypto-policies" |
| 191 | fi | 178 | fi |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·--add=crypto-policies | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | dnf·install·crypto-policies | 190 | dnf·install·crypto-policies |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_.n_.s_.i_.b_.l_.e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 203 | include·install_crypto-policies | ||
| 204 | class·install_crypto-policies·{ | ||
| 205 | ··package·{·'crypto-policies': | ||
| 206 | ····ensure·=>·'installed', | ||
| 207 | ··} | ||
| 208 | 196 | -·name:·Ensure·crypto-policies·is·installed | |
| 197 | ··package: | ||
| 198 | ····name:·crypto-policies | ||
| 199 | ····state:·present | ||
| 200 | ··tags: | ||
| 201 | ··-·CCE-83442-4 | ||
| 202 | ··-·DISA-STIG-RHEL-09-215100 | ||
| 203 | ··-·enable_strategy | ||
| 204 | ··-·low_complexity | ||
| 205 | ··-·low_disruption | ||
| 206 | ··-·medium_severity | ||
| 207 | ··-·no_reboot_needed | ||
| 208 | ··-·package_crypto-policies_installed | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | package· | 214 | package·install·crypto-policies |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 216 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: | 216 | To·configure·the·system·cryptography·policy·to·use·ciphers·only·from·the·FIPS:OSPP·policy,·run·the·following·command: |
| 217 | $·sudo·update-crypto-policies·--set·FIPS:OSPP | 217 | $·sudo·update-crypto-policies·--set·FIPS:OSPP |
| 218 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. | 218 | The·rule·checks·if·settings·for·selected·crypto·policy·are·configured·as·expected.·Configuration·files·in·the·/etc/crypto-policies/back-ends·are·either·symlinks·to·correct·files·provided·by·Crypto-policies·package·or·they·are·regular·files·in·case·crypto·policy·customizations·are·applied.·Crypto·policies·may·be·customized·by·crypto·policy·modules,·in·which·case·it·is·delimited·from·the·base·policy·using·a·colon. |
| 219 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. | 219 | Warning: ·The·system·needs·to·be·rebooted·for·these·changes·to·take·effect. |
| 220 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. | 220 | Warning: ·System·Crypto·Modules·must·be·provided·by·a·vendor·that·undergoes·FIPS-140·certifications.·FIPS-140·is·applicable·to·all·Federal·agencies·that·use·cryptographic-based·security·systems·to·protect·sensitive·information·in·computer·and·telecommunication·systems·(including·voice·systems)·as·defined·in·Section·5131·of·the·Information·Technology·Management·Reform·Act·of·1996,·Public·Law·104-106.·This·standard·shall·be·used·in·designing·and·implementing·cryptographic·modules·that·Federal·departments·and·agencies·operate·or·are·operated·for·them·under·contract.·See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8n\x8n_\x8v\x8v_\x8l\x8l_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8/\x8/_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8/\x8/_\x8N\x8N_\x8I\x8I_\x8S\x8S_\x8T\x8T_\x8.\x8._\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x81\x81_\x84\x84_\x80\x80_\x8-\x8-_\x82\x82_\x8.\x8._\x8p\x8p_\x8d\x8d_\x8f\x8f·To·meet·this,·the·system·has·to·have·cryptographic·software·provided·by·a·vendor·that·has·undergone·this·certification.·This·means·providing·documentation,·test·results,·design·information,·and·independent·third·party·review·by·an·accredited·lab.·While·open·source·software·is·capable·of·meeting·this,·it·does·not·meet·FIPS-140·unless·the·vendor·submits·to·this·process. |
| 221 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 221 | Rationale:···Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| Offset 236, 14 lines modified | Offset 236, 58 lines modified | ||
| 236 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 236 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 238 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 238 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 239 | ·············_\x8c_\x8i_\x8s······1.6.1 | 239 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 240 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 | 240 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7,·2.2 |
| 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 | 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-215105,·RHEL-09-671010,·RHEL-09-672030 |
| 242 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule | 242 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258241r1051259_rule,·SV-258230r958408_rule |
| 243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 244 | var_system_crypto_policy='FIPS:OSPP' | ||
| 245 | stderr_of_call=$(update-crypto-policies·--set·${var_system_crypto_policy}·2>&1·>·/dev/null) | ||
| 246 | rc=$? | ||
| 247 | if·test·"$rc"·=·127;·then | ||
| Max diff block lines reached; 915784/924061 bytes (99.10%) of diff not shown. | |||
| Offset 15210, 414 lines modified | Offset 15210, 414 lines modified | ||
| 0003b690:·6172·6765·743d·2223·6964·6d38·3131·3522··arget="#idm8115" | 0003b690:·6172·6765·743d·2223·6964·6d38·3131·3522··arget="#idm8115" | ||
| 0003b6a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b6a0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b6b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b6b0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b6c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b6c0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b6d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b6d0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b6e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b6e0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b6f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b6f0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b700:·6f6e·20 | 0003b700:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | ||
| 0003b710:· | 0003b710:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b720:·6 | 0003b720:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b730:·6 | 0003b730:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b740:·6 | 0003b740:·6964·3d22·6964·6d38·3131·3522·3e3c·7072··id="idm8115"><pr | ||
| 0003b750:· | 0003b750:·653e·3c63·6f64·653e·2320·5265·6d65·6469··e><code>#·Remedi | ||
| 0003b760:·6 | 0003b760:·6174·696f·6e20·6973·2061·7070·6c69·6361··ation·is·applica | ||
| 0003b770:·6 | 0003b770:·626c·6520·6f6e·6c79·2069·6e20·6365·7274··ble·only·in·cert | ||
| 0003b780:· | 0003b780:·6169·6e20·706c·6174·666f·726d·730a·6966··ain·platforms.if | ||
| 0003b790:·2 | 0003b790:·2021·2028·207b·2072·706d·202d·2d71·7569···!·(·{·rpm·--qui | ||
| 0003b7a0:· | 0003b7a0:·6574·202d·7120·6b65·726e·656c·203b·7d20··et·-q·kernel·;}· | ||
| 0003b7b0:·6 | 0003b7b0:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b7c0:· | 0003b7c0:·202d·2d71·7569·6574·202d·7120·7270·6d2d···--quiet·-q·rpm- | ||
| 0003b7d0:· | 0003b7d0:·6f73·7472·6565·203b·7d20·2661·6d70·3b26··ostree·;}·&& | ||
| 0003b7e0:· | 0003b7e0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b7f0:· | 0003b7f0:·6574·202d·7120·626f·6f74·6320·3b7d·2026··et·-q·bootc·;}·& | ||
| 0003b800:·6 | 0003b800:·616d·703b·2661·6d70·3b20·7b20·2120·7270··amp;&·{·!·rp | ||
| 0003b810:· | 0003b810:·6d20·2d2d·7175·6965·7420·2d71·206f·7065··m·--quiet·-q·ope | ||
| 0003b820:· | 0003b820:·6e73·6869·6674·2d6b·7562·656c·6574·203b··nshift-kubelet·; | ||
| 0003b830:·7 | 0003b830:·7d20·293b·2074·6865·6e0a·0a23·2046·696e··}·);·then..#·Fin | ||
| 0003b840:·6 | 0003b840:·6420·7768·6963·6820·6669·6c65·7320·6861··d·which·files·ha | ||
| 0003b850:· | 0003b850:·7665·2069·6e63·6f72·7265·6374·2068·6173··ve·incorrect·has | ||
| 0003b860:· | 0003b860:·6820·286e·6f74·2069·6e20·2f65·7463·2c20··h·(not·in·/etc,· | ||
| 0003b870:· | 0003b870:·6265·6361·7573·6520·6f66·2074·6865·2073··because·of·the·s | ||
| 0003b880:· | 0003b880:·7973·7465·6d20·7265·6c61·7465·6420·636f··ystem·related·co | ||
| 0003b890:·6 | 0003b890:·6e66·6967·2066·696c·6573·2920·616e·6420··nfig·files)·and· | ||
| 0003b8a0:· | 0003b8a0:·7468·656e·2067·6574·2066·696c·6573·206e··then·get·files·n | ||
| 0003b8b0:· | 0003b8b0:·616d·6573·0a66·696c·6573·5f77·6974·685f··ames.files_with_ | ||
| 0003b8c0:· | 0003b8c0:·696e·636f·7272·6563·745f·6861·7368·3d22··incorrect_hash=" | ||
| 0003b8d0:·2 | 0003b8d0:·2428·7270·6d20·2d56·6120·2d2d·6e6f·636f··$(rpm·-Va·--noco | ||
| 0003b8e0:· | 0003b8e0:·6e66·6967·207c·2067·7265·7020·2d45·2027··nfig·|·grep·-E·' | ||
| 0003b8f0:·5 | 0003b8f0:·5e2e·2e35·2720·7c20·6177·6b20·277b·7072··^..5'·|·awk·'{pr | ||
| 0003b900:· | 0003b900:·696e·7420·244e·467d·2720·2922·0a0a·6966··int·$NF}'·)"..if | ||
| 0003b910:· | 0003b910:·205b·202d·6e20·2224·6669·6c65·735f·7769···[·-n·"$files_wi | ||
| 0003b920:· | 0003b920:·7468·5f69·6e63·6f72·7265·6374·5f68·6173··th_incorrect_has | ||
| 0003b930:· | 0003b930:·6822·205d·3b20·7468·656e·0a20·2020·2023··h"·];·then.····# | ||
| 0003b940:· | 0003b940:·2046·726f·6d20·6669·6c65·7320·6e61·6d65···From·files·name | ||
| 0003b950:· | 0003b950:·7320·6765·7420·7061·636b·6167·6520·6e61··s·get·package·na | ||
| 0003b960:· | 0003b960:·6d65·7320·616e·6420·6368·616e·6765·206e··mes·and·change·n | ||
| 0003b970:· | 0003b970:·6577·6c69·6e65·2074·6f20·7370·6163·652c··ewline·to·space, | ||
| 0003b980:· | 0003b980:·2062·6563·6175·7365·2072·706d·2077·7269···because·rpm·wri | ||
| 0003b990:· | 0003b990:·7465·7320·6561·6368·2070·6163·6b61·6765··tes·each·package | ||
| 0003b9a0:· | 0003b9a0:·2074·6f20·6e65·7720·6c69·6e65·0a20·2020···to·new·line.··· | ||
| 0003b9b0:· | 0003b9b0:·2070·6163·6b61·6765·735f·746f·5f72·6569···packages_to_rei | ||
| 0003b9c0:· | 0003b9c0:·6e73·7461·6c6c·3d22·2428·7270·6d20·2d71··nstall="$(rpm·-q | ||
| 0003b9d0:·6 | 0003b9d0:·6620·2466·696c·6573·5f77·6974·685f·696e··f·$files_with_in | ||
| 0003b9e0:· | 0003b9e0:·636f·7272·6563·745f·6861·7368·207c·2074··correct_hash·|·t | ||
| 0003b9f0:· | 0003b9f0:·7220·275c·6e27·2027·2027·2922·0a0a·2020··r·'\n'·'·')"..·· | ||
| 0003ba00:· | 0003ba00:·2020·0a20·2020·2064·6e66·2072·6569·6e73····.····dnf·reins | ||
| 0003ba10:·7 | 0003ba10:·7461·6c6c·202d·7920·2470·6163·6b61·6765··tall·-y·$package | ||
| 0003ba20:· | 0003ba20:·735f·746f·5f72·6569·6e73·7461·6c6c·0a20··s_to_reinstall.· | ||
| 0003ba30:· | 0003ba30:·2020·200a·6669·0a0a·656c·7365·0a20·2020·····.fi..else.··· | ||
| 0003ba40:· | 0003ba40:·2026·6774·3b26·616d·703b·3220·6563·686f···>&2·echo | ||
| 0003ba50:· | 0003ba50:·2027·5265·6d65·6469·6174·696f·6e20·6973···'Remediation·is | ||
| 0003ba60:·0 | 0003ba60:·206e·6f74·2061·7070·6c69·6361·626c·652c···not·applicable, | ||
| 0003ba70:· | 0003ba70:·206e·6f74·6869·6e67·2077·6173·2064·6f6e···nothing·was·don | ||
| 0003ba80:·6 | 0003ba80:·6527·0a66·690a·3c2f·636f·6465·3e3c·2f70··e'.fi.</code></p | ||
| 0003ba90:· | 0003ba90:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0003baa0:· | 0003baa0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0003bab0:· | 0003bab0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0003bac0:·2 | 0003bac0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0003bad0:·7 | 0003bad0:·7461·7267·6574·3d22·2369·646d·3831·3136··target="#idm8116 | ||
| 0003bae0:· | 0003bae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003baf0:·6 | 0003baf0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003bb00:·6 | 0003bb00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003bb10:·6 | 0003bb10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003bb20:· | 0003bb20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003bb30:· | 0003bb30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003bb40:· | 0003bb40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003bb50:· | 0003bb50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003bb60:·6 | 0003bb60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003bb70:· | 0003bb70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003bb80:· | 0003bb80:·7365·2220·6964·3d22·6964·6d38·3131·3622··se"·id="idm8116" | ||
| 0003bb90:· | 0003bb90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003bba0:·6 | 0003bba0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003bbb0:· | 0003bbb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003bbc0:· | 0003bbc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003bbd0:· | 0003bbd0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003bbe0:· | 0003bbe0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e68··exity:</th><td>h | ||
| 0003bbf0:· | 0003bbf0:·6967·683c·2f74·643e·3c2f·7472·3e3c·7472··igh</td></tr><tr | ||
| 0003bc00:· | 0003bc00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003bc10:· | 0003bc10:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003bc20:· | 0003bc20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bc30:· | 0003bc30:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003bc40:· | 0003bc40:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003bc50:·3 | 0003bc50:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003bc60:· | 0003bc60:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003bc70:· | 0003bc70:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003bc80:· | 0003bc80:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003bc90:· | 0003bc90:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | ||
| 0003bca0:· | 0003bca0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | ||
| 0003bcb0:· | 0003bcb0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | ||
| 0003bcc0:· | 0003bcc0:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | ||
| 0003bcd0:· | 0003bcd0:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | ||
| 0003bce0:· | 0003bce0:·4345·2d39·3038·3431·2d38·0a20·202d·2043··CE-90841-8.··-·C | ||
| 0003bcf0:· | 0003bcf0:·4a49·532d·352e·3130·2e34·2e31·0a20·202d··JIS-5.10.4.1.··- | ||
| 0003bd00:· | 0003bd00:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 0003bd10:· | 0003bd10:·332e·380a·2020·2d20·4e49·5354·2d38·3030··3.8.··-·NIST-800 | ||
| 0003bd20:·2 | 0003bd20:·2d31·3731·2d33·2e34·2e31·0a20·202d·204e··-171-3.4.1.··-·N | ||
| 0003bd30:· | 0003bd30:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | ||
| 0003bd40:· | 0003bd40:·3329·0a20·202d·204e·4953·542d·3830·302d··3).··-·NIST-800- | ||
| 0003bd50:· | 0003bd50:·3533·2d43·4d2d·3628·6329·0a20·202d·204e··53-CM-6(c).··-·N | ||
| 0003bd60:· | 0003bd60:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | ||
| 0003bd70:· | 0003bd70:·6429·0a20·202d·204e·4953·542d·3830·302d··d).··-·NIST-800- | ||
| 0003bd80:· | 0003bd80:·3533·2d53·492d·370a·2020·2d20·4e49·5354··53-SI-7.··-·NIST | ||
| 0003bd90:· | 0003bd90:·2d38·3030·2d35·332d·5349·2d37·2831·290a··-800-53-SI-7(1). | ||
| 0003bda0:· | 0003bda0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003bdb0:· | 0003bdb0:·5349·2d37·2836·290a·2020·2d20·5043·492d··SI-7(6).··-·PCI- | ||
| 0003bdc0:· | 0003bdc0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003bdd0:· | 0003bdd0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003bde0:· | 0003bde0:·320a·2020·2d20·6869·6768·5f63·6f6d·706c··2.··-·high_compl | ||
| 0003bdf0:·6 | 0003bdf0:·6578·6974·790a·2020·2d20·6869·6768·5f73··exity.··-·high_s | ||
| 0003be00:·6 | 0003be00:·6576·6572·6974·790a·2020·2d20·6d65·6469··everity.··-·medi | ||
| 0003be10:·7 | 0003be10:·756d·5f64·6973·7275·7074·696f·6e0a·2020··um_disruption.·· | ||
| 0003be20:·2 | 0003be20:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | ||
| 0003be30:· | 0003be30:·6564·0a20·202d·2072·6573·7472·6963·745f··ed.··-·restrict_ | ||
| 0003be40:· | 0003be40:·7374·7261·7465·6779·0a20·202d·2072·706d··strategy.··-·rpm | ||
| 0003be50:· | 0003be50:·5f76·6572·6966·795f·6861·7368·6573·0a0a··_verify_hashes.. | ||
| 0003be60:· | 0003be60:·2d20·6e61·6d65·3a20·2753·6574·2066·6163··-·name:·'Set·fac | ||
| Max diff block lines reached; 17917751/17973531 bytes (99.69%) of diff not shown. | |||
| Offset 15159, 284 lines modified | Offset 15159, 284 lines modified | ||
| 0003b360:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | 0003b360:·6172·6765·743d·2223·6964·6d38·3435·3822··arget="#idm8458" | ||
| 0003b370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b370:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b380:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b390:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b3a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b3b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b3c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b3d0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b3e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b3f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b400:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b410:·6522·2069·643d·2269·646d·3834·3538·223e··e"·id="idm8458"> | |||
| 0003b420:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b430:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b440:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b450:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b460:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b470:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b3d0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b3e0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b3f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b400:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b410:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b420:·2269·646d·3834·3538·223e·3c70·7265·3e3c··"idm8458"><pre>< | |||
| 0003b430:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b440:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b450:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b460:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b470:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b480:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b490:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b4a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b4b0:·2223·6964·6d38·3435·3922·2074·6162·696e··"#idm8459"·tabin | |||
| 0003b4c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b4d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b4e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b4f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b500:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b510:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b520:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b530:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b540:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b550:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b560:·6964·6d38·3435·3922·3e3c·7461·626c·6520··idm8459"><table· | |||
| 0003b570:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b580:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b590:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b5a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b5b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003b5c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b5d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003b5e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003b5f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003b600:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b | 0003b610:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b620:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b630:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b500:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b510:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b520:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b530:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b540:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b550:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b560:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b570:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b580:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b590:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b5a0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b5b0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b5c0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b5d0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b5e0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b5f0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b600:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b610:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b620:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b630:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b640:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b650:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b660:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b670:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b680:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b690:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b6a0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b6b0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b6c0:·656c·2220·696e·2061·6e73·6962·6c65·5f66··el"·in·ansible_f | |||
| 0003b6d0:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b6e0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b6f0:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b700:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b710:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b720:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b730:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b740:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b750:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b760:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b770:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b780:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b790:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b7a0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b7b0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b7c0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b7d0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b7e0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b7f0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b800:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b810:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b820:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b830:·7461·7267·6574·3d22·2369·646d·3834·3539··target="#idm8459 | |||
| 0003b840:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b850:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b860:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b870:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b880:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b890:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b8a0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003b8b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8e0:·646d·3834·3539·223e·3c74·6162·6c65·2063··dm8459"><table·c | |||
| 0003b8f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b900:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b910:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b920:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b930:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b940:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| Max diff block lines reached; 32786334/32824174 bytes (99.88%) of diff not shown. | |||
| Offset 15177, 285 lines modified | Offset 15177, 285 lines modified | ||
| 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b480:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b490:·2369·646d·3834·3538·2220·7461·6269·6e64··#idm8458"·tabind | 0003b490:·2369·646d·3834·3538·2220·7461·6269·6e64··#idm8458"·tabind | ||
| 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b4a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b4b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b4c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b4d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b4e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4f0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b4f0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b500:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b510:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b520:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b530:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b540:·6964·6d38·3435·3822·3e3c·7461·626c·6520··idm8458"><table· | |||
| 0003b550:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b560:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b570:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b580:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b590:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b5a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b5 | 0003b500:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b510:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b520:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b530:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b540:·6170·7365·2220·6964·3d22·6964·6d38·3435··apse"·id="idm845 | |||
| 0003b550:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 0003b560:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b570:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b580:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b590:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b5a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b5b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b5c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b5d0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b5e0:·3539·2220·7461·6269·6e64·6578·3d22·3022··59"·tabindex="0" | |||
| 0003b5f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b600:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b610:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b620:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b630:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b640:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b650:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b660:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b670:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b680:·7073·6522·2069·643d·2269·646d·3834·3539··pse"·id="idm8459 | |||
| 0003b690:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b6a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b6b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b6c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b6d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003b6e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b | 0003b6f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b5e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b700:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b710:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b | 0003b720:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003b730:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b740:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b750:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b760:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b770:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b780:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0003b620:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b630:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b640:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b650:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b660:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b670:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b680:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b690:·2043·4345·2d39·3038·3433·2d34·0a20·202d···CCE-90843-4.··- | |||
| 0003b6a0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b6b0:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003b6c0:·4c2d·3039·2d36·3531·3031·300a·2020·2d20··L-09-651010.··-· | |||
| 0003b6d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b6e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b6f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b700:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b710:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b720:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b730:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b740:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b750:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b760:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b770:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b780:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b790:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b7a0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b7b0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b7c0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b7d0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b7e0:·6e3a·2027·226b·6572·6e65·6c22·2069·6e20··n:·'"kernel"·in· | |||
| 0003b7f0:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003b800:·636b·6167·6573·270a·2020·7461·6773·3a0a··ckages'.··tags:. | |||
| 0003b810:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 0003b820:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b830:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b840:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b850:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b860:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b870:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b880:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b890:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b8a0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b8b0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b8c0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b8d0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b8e0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b8f0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b900:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b910:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b920:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b930:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b940:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b950:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b960:·2223·6964·6d38·3435·3922·2074·6162·696e··"#idm8459"·tabin | |||
| 0003b970:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b980:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b990:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b9a0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b9b0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b9c0:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003b9d0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b9e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba00:·7365·2220·6964·3d22·6964·6d38·3435·3922··se"·id="idm8459" | |||
| 0003ba10:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003ba20:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ba30:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| Max diff block lines reached; 32703373/32741351 bytes (99.88%) of diff not shown. | |||
| Offset 15127, 408 lines modified | Offset 15127, 408 lines modified | ||
| 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b160:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b170:·2223·6964·6d31·3630·3822·2074·6162·696e··"#idm1608"·tabin | 0003b170:·2223·6964·6d31·3630·3822·2074·6162·696e··"#idm1608"·tabin | ||
| 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b1d0:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b1e0:·6 | 0003b1e0:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b1f0:·3 | 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b200:· | 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b210:· | 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b220:· | 0003b220:·6d31·3630·3822·3e3c·7072·653e·3c63·6f64··m1608"><pre><cod | ||
| 0003b230:· | 0003b230:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b240:·6 | 0003b240:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b250:·6 | 0003b250:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b260:· | 0003b260:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b270:· | 0003b270:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b280:· | 0003b280:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b290:· | 0003b290:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b2a0:·7 | 0003b2a0:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b2b0:· | 0003b2b0:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b2c0:· | 0003b2c0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b2d0:· | 0003b2d0:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b2e0:· | 0003b2e0:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b2f0:· | 0003b2f0:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b300:· | 0003b300:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b310:· | 0003b310:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b320:·6 | 0003b320:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b330:· | 0003b330:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b340:· | 0003b340:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b350:·6 | 0003b350:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b360:· | 0003b360:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b370:·6 | 0003b370:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b380:· | 0003b380:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b390:· | 0003b390:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b3a0:· | 0003b3a0:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b3b0:· | 0003b3b0:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b3c0:·2 | 0003b3c0:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b3d0:· | 0003b3d0:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b3e0:· | 0003b3e0:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b3f0:·2 | 0003b3f0:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b400:· | 0003b400:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b410:· | 0003b410:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b420:· | 0003b420:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b430:· | 0003b430:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b440:· | 0003b440:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b450:·2 | 0003b450:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b460:· | 0003b460:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b470:·6 | 0003b470:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b480:· | 0003b480:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b490:· | 0003b490:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b4a0:· | 0003b4a0:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b4b0:·6 | 0003b4b0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b4c0:·7 | 0003b4c0:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b4d0:· | 0003b4d0:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b4e0:· | 0003b4e0:·2079·756d·2072·6569·6e73·7461·6c6c·202d···yum·reinstall·- | ||
| 0003b4f0:· | 0003b4f0:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003b500:·6 | 0003b500:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003b510:· | 0003b510:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003b520:· | 0003b520:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003b530:·6 | 0003b530:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003b540:· | 0003b540:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003b550:·6 | 0003b550:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003b560:· | 0003b560:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b570:· | 0003b570:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b580:· | 0003b580:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b590:· | 0003b590:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b5a0:·7 | 0003b5a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b5b0:· | 0003b5b0:·3d22·2369·646d·3136·3039·2220·7461·6269··="#idm1609"·tabi | ||
| 0003b5c0:· | 0003b5c0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b5d0:· | 0003b5d0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b5e0:· | 0003b5e0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5f0:· | 0003b5f0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b600:· | 0003b600:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b610:· | 0003b610:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b620:· | 0003b620:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003b630:· | 0003b630:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b640:· | 0003b640:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b650:· | 0003b650:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b660:· | 0003b660:·3d22·6964·6d31·3630·3922·3e3c·7461·626c··="idm1609"><tabl | ||
| 0003b670:· | 0003b670:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003b680:· | 0003b680:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003b690:· | 0003b690:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003b6a0:· | 0003b6a0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003b6b0:·3 | 0003b6b0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003b6c0:· | 0003b6c0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003b6d0:· | 0003b6d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003b6e0:· | 0003b6e0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003b6f0:· | 0003b6f0:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003b700:· | 0003b700:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b710:· | 0003b710:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b720:·3 | 0003b720:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b730:· | 0003b730:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b740:· | 0003b740:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003b750:· | 0003b750:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003b760:· | 0003b760:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003b770:·20 | 0003b770:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003b780:·6 | 0003b780:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003b790:·65 | 0003b790:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003b7a0:· | 0003b7a0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003b7b0:·6 | 0003b7b0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 0003b7c0:· | 0003b7c0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003b7d0:· | 0003b7d0:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003b7e0:· | 0003b7e0:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003b7f0:· | 0003b7f0:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003b800:· | 0003b800:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003b810:·20 | 0003b810:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003b820:· | 0003b820:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003b830:· | 0003b830:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003b840:· | 0003b840:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003b850:· | 0003b850:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003b860:· | 0003b860:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003b870:· | 0003b870:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003b880:· | 0003b880:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003b890:· | 0003b890:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003b8a0:· | 0003b8a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003b8b0:· | 0003b8b0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003b8c0:· | 0003b8c0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003b8d0:· | 0003b8d0:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003b8e0:· | 0003b8e0:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003b8f0:·6 | 0003b8f0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003b900:· | 0003b900:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003b910:· | 0003b910:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003b920:·7 | 0003b920:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| 0003b930:· | 0003b930:·3a20·2753·6574·2066·6163·743a·2050·6163··:·'Set·fact:·Pac | ||
| Max diff block lines reached; 14094326/14149278 bytes (99.61%) of diff not shown. | |||
| Offset 97, 14 lines modified | Offset 97, 33 lines modified | ||
| 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 97 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 103 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 105 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 106 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 107 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 108 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 109 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 110 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 111 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 112 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 113 | fi | ||
| 114 | else | ||
| 115 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 116 | fi | ||
| 104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 106 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 107 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 108 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 109 | -·name:·Gather·the·package·facts | 122 | -·name:·Gather·the·package·facts |
| 110 | ··package_facts: | 123 | ··package_facts: |
| Offset 271, 33 lines modified | Offset 290, 14 lines modified | ||
| 271 | ··-·PCI-DSSv4-11.5.2 | 290 | ··-·PCI-DSSv4-11.5.2 |
| 272 | ··-·high_complexity | 291 | ··-·high_complexity |
| 273 | ··-·high_severity | 292 | ··-·high_severity |
| 274 | ··-·medium_disruption | 293 | ··-·medium_disruption |
| 275 | ··-·no_reboot_needed | 294 | ··-·no_reboot_needed |
| 276 | ··-·restrict_strategy | 295 | ··-·restrict_strategy |
| 277 | ··-·rpm_verify_hashes | 296 | ··-·rpm_verify_hashes |
| 278 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 279 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 280 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 281 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 282 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 283 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 284 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 285 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 286 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 287 | fi | ||
| 288 | else | ||
| 289 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 290 | fi | ||
| 291 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 297 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 292 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 298 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and·commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 293 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 299 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 294 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: | 300 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions,·run·the·following·command·to·determine·which·package·owns·it: |
| 295 | $·rpm·-qf·FILENAME | 301 | $·rpm·-qf·FILENAME |
| 296 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 302 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| Offset 318, 14 lines modified | Offset 318, 50 lines modified | ||
| 318 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 318 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 319 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 319 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 320 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 320 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 321 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 321 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 322 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 322 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 | 323 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099,·SRG-OS-000278-GPOS-00108 |
| 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 324 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 331 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 332 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 333 | declare·-A·SETPERMS_RPM_DICT | ||
| 334 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 335 | #·is·expected·by·the·RPM·database | ||
| 336 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}') | ||
| 337 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 338 | do | ||
| 339 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 340 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 341 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 342 | ········do | ||
| 343 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 344 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 345 | ········done | ||
| 346 | done | ||
| 347 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 348 | #·correct·values | ||
| 349 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 350 | do | ||
| 351 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 352 | done | ||
| 353 | else | ||
| 354 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 355 | fi | ||
| 325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 330 | -·name:·Gather·the·package·facts | 361 | -·name:·Gather·the·package·facts |
| 331 | ··package_facts: | 362 | ··package_facts: |
| Offset 437, 50 lines modified | Offset 473, 14 lines modified | ||
| 437 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 438 | ··-·high_complexity | 474 | ··-·high_complexity |
| 439 | ··-·high_severity | 475 | ··-·high_severity |
| 440 | ··-·medium_disruption | 476 | ··-·medium_disruption |
| 441 | ··-·no_reboot_needed | 477 | ··-·no_reboot_needed |
| 442 | ··-·restrict_strategy | 478 | ··-·restrict_strategy |
| 443 | ··-·rpm_verify_permissions | 479 | ··-·rpm_verify_permissions |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 1045326/1053405 bytes (99.23%) of diff not shown. | |||
| Offset 15180, 408 lines modified | Offset 15180, 408 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3136·3038·2220·7461·6269·6e64·6578··dm1608"·tabindex | 0003b4c0:·646d·3136·3038·2220·7461·6269·6e64·6578··dm1608"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20· | 0003b520:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | ||
| 0003b530:· | 0003b530:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | ||
| 0003b540:· | 0003b540:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0003b550:· | 0003b550:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b560:·6 | 0003b560:·6c61·7073·6522·2069·643d·2269·646d·3136··lapse"·id="idm16 | ||
| 0003b570:· | 0003b570:·3038·223e·3c70·7265·3e3c·636f·6465·3e23··08"><pre><code># | ||
| 0003b580:· | 0003b580:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | ||
| 0003b590:· | 0003b590:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | ||
| 0003b5a0:·6 | 0003b5a0:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | ||
| 0003b5b0:·6 | 0003b5b0:·6f72·6d73·0a69·6620·2120·2820·7b20·7270··orms.if·!·(·{·rp | ||
| 0003b5c0:· | 0003b5c0:·6d20·2d2d·7175·6965·7420·2d71·206b·6572··m·--quiet·-q·ker | ||
| 0003b5d0:· | 0003b5d0:·6e65·6c20·3b7d·2026·616d·703b·2661·6d70··nel·;}·&& | ||
| 0003b5e0:· | 0003b5e0:·3b20·7b20·7270·6d20·2d2d·7175·6965·7420··;·{·rpm·--quiet· | ||
| 0003b5f0:· | 0003b5f0:·2d71·2072·706d·2d6f·7374·7265·6520·3b7d··-q·rpm-ostree·;} | ||
| 0003b600:· | 0003b600:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b610:· | 0003b610:·6d20·2d2d·7175·6965·7420·2d71·2062·6f6f··m·--quiet·-q·boo | ||
| 0003b620:·746 | 0003b620:·7463·203b·7d20·2661·6d70·3b26·616d·703b··tc·;}·&& | ||
| 0003b630:· | 0003b630:·207b·2021·2072·706d·202d·2d71·7569·6574···{·!·rpm·--quiet | ||
| 0003b640:· | 0003b640:·202d·7120·6f70·656e·7368·6966·742d·6b75···-q·openshift-ku | ||
| 0003b650:· | 0003b650:·6265·6c65·7420·3b7d·2029·3b20·7468·656e··belet·;}·);·then | ||
| 0003b660:· | 0003b660:·0a0a·2320·4669·6e64·2077·6869·6368·2066··..#·Find·which·f | ||
| 0003b670:·6 | 0003b670:·696c·6573·2068·6176·6520·696e·636f·7272··iles·have·incorr | ||
| 0003b680:·6 | 0003b680:·6563·7420·6861·7368·2028·6e6f·7420·696e··ect·hash·(not·in | ||
| 0003b690:· | 0003b690:·202f·6574·632c·2062·6563·6175·7365·206f···/etc,·because·o | ||
| 0003b6a0:·66 | 0003b6a0:·6620·7468·6520·7379·7374·656d·2072·656c··f·the·system·rel | ||
| 0003b6b0:·6 | 0003b6b0:·6174·6564·2063·6f6e·6669·6720·6669·6c65··ated·config·file | ||
| 0003b6c0:· | 0003b6c0:·7329·2061·6e64·2074·6865·6e20·6765·7420··s)·and·then·get· | ||
| 0003b6d0:· | 0003b6d0:·6669·6c65·7320·6e61·6d65·730a·6669·6c65··files·names.file | ||
| 0003b6e0:· | 0003b6e0:·735f·7769·7468·5f69·6e63·6f72·7265·6374··s_with_incorrect | ||
| 0003b6f0:·5 | 0003b6f0:·5f68·6173·683d·2224·2872·706d·202d·5661··_hash="$(rpm·-Va | ||
| 0003b700:· | 0003b700:·202d·2d6e·6f63·6f6e·6669·6720·7c20·6772···--noconfig·|·gr | ||
| 0003b710:· | 0003b710:·6570·202d·4520·275e·2e2e·3527·207c·2061··ep·-E·'^..5'·|·a | ||
| 0003b720:· | 0003b720:·776b·2027·7b70·7269·6e74·2024·4e46·7d27··wk·'{print·$NF}' | ||
| 0003b730:· | 0003b730:·2029·220a·0a69·6620·5b20·2d6e·2022·2466···)"..if·[·-n·"$f | ||
| 0003b740:· | 0003b740:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b750:· | 0003b750:·6563·745f·6861·7368·2220·5d3b·2074·6865··ect_hash"·];·the | ||
| 0003b760:· | 0003b760:·6e0a·2020·2020·2320·4672·6f6d·2066·696c··n.····#·From·fil | ||
| 0003b770:· | 0003b770:·6573·206e·616d·6573·2067·6574·2070·6163··es·names·get·pac | ||
| 0003b780:· | 0003b780:·6b61·6765·206e·616d·6573·2061·6e64·2063··kage·names·and·c | ||
| 0003b790:· | 0003b790:·6861·6e67·6520·6e65·776c·696e·6520·746f··hange·newline·to | ||
| 0003b7a0:·2 | 0003b7a0:·2073·7061·6365·2c20·6265·6361·7573·6520···space,·because· | ||
| 0003b7b0:· | 0003b7b0:·7270·6d20·7772·6974·6573·2065·6163·6820··rpm·writes·each· | ||
| 0003b7c0:· | 0003b7c0:·7061·636b·6167·6520·746f·206e·6577·206c··package·to·new·l | ||
| 0003b7d0:·6 | 0003b7d0:·696e·650a·2020·2020·7061·636b·6167·6573··ine.····packages | ||
| 0003b7e0:· | 0003b7e0:·5f74·6f5f·7265·696e·7374·616c·6c3d·2224··_to_reinstall="$ | ||
| 0003b7f0:· | 0003b7f0:·2872·706d·202d·7166·2024·6669·6c65·735f··(rpm·-qf·$files_ | ||
| 0003b800:·7 | 0003b800:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b810:· | 0003b810:·6173·6820·7c20·7472·2027·5c6e·2720·2720··ash·|·tr·'\n'·'· | ||
| 0003b820:·2 | 0003b820:·2729·220a·0a20·2020·200a·2020·2020·7975··')"..····.····yu | ||
| 0003b830:· | 0003b830:·6d20·7265·696e·7374·616c·6c20·2d79·2024··m·reinstall·-y·$ | ||
| 0003b840:· | 0003b840:·7061·636b·6167·6573·5f74·6f5f·7265·696e··packages_to_rein | ||
| 0003b850:· | 0003b850:·7374·616c·6c0a·2020·2020·0a66·690a·0a65··stall.····.fi..e | ||
| 0003b860:·6c | 0003b860:·6c73·650a·2020·2020·2667·743b·2661·6d70··lse.····>& | ||
| 0003b870:· | 0003b870:·3b32·2065·6368·6f20·2752·656d·6564·6961··;2·echo·'Remedia | ||
| 0003b880:· | 0003b880:·7469·6f6e·2069·7320·6e6f·7420·6170·706c··tion·is·not·appl | ||
| 0003b890:· | 0003b890:·6963·6162·6c65·2c20·6e6f·7468·696e·6720··icable,·nothing· | ||
| 0003b8a0:· | 0003b8a0:·7761·7320·646f·6e65·270a·6669·0a3c·2f63··was·done'.fi.</c | ||
| 0003b8b0:·6 | 0003b8b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 0003b8c0:· | 0003b8c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b8d0:·6 | 0003b8d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003b8e0:· | 0003b8e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 0003b8f0:·2220·6 | 0003b8f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b900:· | 0003b900:·6964·6d31·3630·3922·2074·6162·696e·6465··idm1609"·tabinde | ||
| 0003b910:· | 0003b910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b920:·6 | 0003b920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b930:·6 | 0003b930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b940:· | 0003b940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b950:· | 0003b950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b960:· | 0003b960:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 0003b970:· | 0003b970:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b980:· | 0003b980:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b990:· | 0003b990:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b9a0:· | 0003b9a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b9b0:· | 0003b9b0:·646d·3136·3039·223e·3c74·6162·6c65·2063··dm1609"><table·c | ||
| 0003b9c0:· | 0003b9c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b9d0:· | 0003b9d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b9e0:· | 0003b9e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b9f0:· | 0003b9f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003ba00:· | 0003ba00:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003ba10:· | 0003ba10:·683e·3c74·643e·6869·6768·3c2f·7464·3e3c··h><td>high</td>< | ||
| 0003ba20:·2 | 0003ba20:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003ba30:· | 0003ba30:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003ba40:· | 0003ba40:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0003ba50:· | 0003ba50:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003ba60:·2 | 0003ba60:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003ba70:· | 0003ba70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003ba80:· | 0003ba80:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003ba90:·3 | 0003ba90:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003baa0:· | 0003baa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003bab0:· | 0003bab0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | ||
| 0003bac0:· | 0003bac0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | ||
| 0003bad0:· | 0003bad0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | ||
| 0003bae0:· | 0003bae0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | ||
| 0003baf0:· | 0003baf0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | ||
| 0003bb00:· | 0003bb00:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | ||
| 0003bb10:· | 0003bb10:·342e·310a·2020·2d20·4e49·5354·2d38·3030··4.1.··-·NIST-800 | ||
| 0003bb20:· | 0003bb20:·2d31·3731·2d33·2e33·2e38·0a20·202d·204e··-171-3.3.8.··-·N | ||
| 0003bb30:· | 0003bb30:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | ||
| 0003bb40:· | 0003bb40:·310a·2020·2d20·4e49·5354·2d38·3030·2d35··1.··-·NIST-800-5 | ||
| 0003bb50:· | 0003bb50:·332d·4155·2d39·2833·290a·2020·2d20·4e49··3-AU-9(3).··-·NI | ||
| 0003bb60:· | 0003bb60:·5354·2d38·3030·2d35·332d·434d·2d36·2863··ST-800-53-CM-6(c | ||
| 0003bb70:·2 | 0003bb70:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | ||
| 0003bb80:· | 0003bb80:·332d·434d·2d36·2864·290a·2020·2d20·4e49··3-CM-6(d).··-·NI | ||
| 0003bb90:· | 0003bb90:·5354·2d38·3030·2d35·332d·5349·2d37·0a20··ST-800-53-SI-7.· | ||
| 0003bba0:· | 0003bba0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003bbb0:· | 0003bbb0:·492d·3728·3129·0a20·202d·204e·4953·542d··I-7(1).··-·NIST- | ||
| 0003bbc0:· | 0003bbc0:·3830·302d·3533·2d53·492d·3728·3629·0a20··800-53-SI-7(6).· | ||
| 0003bbd0:· | 0003bbd0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 0003bbe0:· | 0003bbe0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 0003bbf0:· | 0003bbf0:·342d·3131·2e35·2e32·0a20·202d·2068·6967··4-11.5.2.··-·hig | ||
| 0003bc00:·6 | 0003bc00:·685f·636f·6d70·6c65·7869·7479·0a20·202d··h_complexity.··- | ||
| 0003bc10:· | 0003bc10:·2068·6967·685f·7365·7665·7269·7479·0a20···high_severity.· | ||
| 0003bc20:·202 | 0003bc20:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 0003bc30:· | 0003bc30:·7469·6f6e·0a20·202d·206e·6f5f·7265·626f··tion.··-·no_rebo | ||
| 0003bc40:·6 | 0003bc40:·6f74·5f6e·6565·6465·640a·2020·2d20·7265··ot_needed.··-·re | ||
| 0003bc50:·73 | 0003bc50:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | ||
| 0003bc60:· | 0003bc60:·2020·2d20·7270·6d5f·7665·7269·6679·5f68····-·rpm_verify_h | ||
| 0003bc70:· | 0003bc70:·6173·6865·730a·0a2d·206e·616d·653a·2027··ashes..-·name:·' | ||
| 0003bc80:· | 0003bc80:·5365·7420·6661·6374·3a20·5061·636b·6167··Set·fact:·Packag | ||
| Max diff block lines reached; 24765723/24820675 bytes (99.78%) of diff not shown. | |||
| Offset 15203, 408 lines modified | Offset 15203, 408 lines modified | ||
| 0003b620:·7461·7267·6574·3d22·2369·646d·3136·3038··target="#idm1608 | 0003b620:·7461·7267·6574·3d22·2369·646d·3136·3038··target="#idm1608 | ||
| 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b630:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b640:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b650:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b660:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b670:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | Diff chunk too large, falling back to line-by-line diff (394 lines added, 394 lines removed) | |
| 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b680:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b690:·696f·6e20· | 0003b690:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0003b6a0:· | 0003b6a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b6b0:· | 0003b6b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b6c0:· | 0003b6c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b6d0:· | 0003b6d0:·2069·643d·2269·646d·3136·3038·223e·3c70···id="idm1608"><p | ||
| 0003b6e0:· | 0003b6e0:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | ||
| 0003b6f0:·6 | 0003b6f0:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | ||
| 0003b700:·6 | 0003b700:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | ||
| 0003b710:· | 0003b710:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | ||
| 0003b720:·6 | 0003b720:·6620·2120·2820·7b20·7270·6d20·2d2d·7175··f·!·(·{·rpm·--qu | ||
| 0003b730:·6 | 0003b730:·6965·7420·2d71·206b·6572·6e65·6c20·3b7d··iet·-q·kernel·;} | ||
| 0003b740:·6 | 0003b740:·2026·616d·703b·2661·6d70·3b20·7b20·7270···&&·{·rp | ||
| 0003b750:· | 0003b750:·6d20·2d2d·7175·6965·7420·2d71·2072·706d··m·--quiet·-q·rpm | ||
| 0003b760:· | 0003b760:·2d6f·7374·7265·6520·3b7d·2026·616d·703b··-ostree·;}·& | ||
| 0003b770:·2 | 0003b770:·2661·6d70·3b20·7b20·7270·6d20·2d2d·7175··&·{·rpm·--qu | ||
| 0003b780:· | 0003b780:·6965·7420·2d71·2062·6f6f·7463·203b·7d20··iet·-q·bootc·;}· | ||
| 0003b790:· | 0003b790:·2661·6d70·3b26·616d·703b·207b·2021·2072··&&·{·!·r | ||
| 0003b7a0:· | 0003b7a0:·706d·202d·2d71·7569·6574·202d·7120·6f70··pm·--quiet·-q·op | ||
| 0003b7b0:· | 0003b7b0:·656e·7368·6966·742d·6b75·6265·6c65·7420··enshift-kubelet· | ||
| 0003b7c0:· | 0003b7c0:·3b7d·2029·3b20·7468·656e·0a0a·2320·4669··;}·);·then..#·Fi | ||
| 0003b7d0:·6 | 0003b7d0:·6e64·2077·6869·6368·2066·696c·6573·2068··nd·which·files·h | ||
| 0003b7e0:· | 0003b7e0:·6176·6520·696e·636f·7272·6563·7420·6861··ave·incorrect·ha | ||
| 0003b7f0:· | 0003b7f0:·7368·2028·6e6f·7420·696e·202f·6574·632c··sh·(not·in·/etc, | ||
| 0003b800:·20 | 0003b800:·2062·6563·6175·7365·206f·6620·7468·6520···because·of·the· | ||
| 0003b810:· | 0003b810:·7379·7374·656d·2072·656c·6174·6564·2063··system·related·c | ||
| 0003b820:· | 0003b820:·6f6e·6669·6720·6669·6c65·7329·2061·6e64··onfig·files)·and | ||
| 0003b830:· | 0003b830:·2074·6865·6e20·6765·7420·6669·6c65·7320···then·get·files· | ||
| 0003b840:· | 0003b840:·6e61·6d65·730a·6669·6c65·735f·7769·7468··names.files_with | ||
| 0003b850:· | 0003b850:·5f69·6e63·6f72·7265·6374·5f68·6173·683d··_incorrect_hash= | ||
| 0003b860:·2 | 0003b860:·2224·2872·706d·202d·5661·202d·2d6e·6f63··"$(rpm·-Va·--noc | ||
| 0003b870:· | 0003b870:·6f6e·6669·6720·7c20·6772·6570·202d·4520··onfig·|·grep·-E· | ||
| 0003b880:· | 0003b880:·275e·2e2e·3527·207c·2061·776b·2027·7b70··'^..5'·|·awk·'{p | ||
| 0003b890:· | 0003b890:·7269·6e74·2024·4e46·7d27·2029·220a·0a69··rint·$NF}'·)"..i | ||
| 0003b8a0:· | 0003b8a0:·6620·5b20·2d6e·2022·2466·696c·6573·5f77··f·[·-n·"$files_w | ||
| 0003b8b0:·6 | 0003b8b0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b8c0:·353 | 0003b8c0:·7368·2220·5d3b·2074·6865·6e0a·2020·2020··sh"·];·then.···· | ||
| 0003b8d0:·2 | 0003b8d0:·2320·4672·6f6d·2066·696c·6573·206e·616d··#·From·files·nam | ||
| 0003b8e0:· | 0003b8e0:·6573·2067·6574·2070·6163·6b61·6765·206e··es·get·package·n | ||
| 0003b8f0:· | 0003b8f0:·616d·6573·2061·6e64·2063·6861·6e67·6520··ames·and·change· | ||
| 0003b900:· | 0003b900:·6e65·776c·696e·6520·746f·2073·7061·6365··newline·to·space | ||
| 0003b910:·2 | 0003b910:·2c20·6265·6361·7573·6520·7270·6d20·7772··,·because·rpm·wr | ||
| 0003b920:· | 0003b920:·6974·6573·2065·6163·6820·7061·636b·6167··ites·each·packag | ||
| 0003b930:·65 | 0003b930:·6520·746f·206e·6577·206c·696e·650a·2020··e·to·new·line.·· | ||
| 0003b940:· | 0003b940:·2020·7061·636b·6167·6573·5f74·6f5f·7265····packages_to_re | ||
| 0003b950:· | 0003b950:·696e·7374·616c·6c3d·2224·2872·706d·202d··install="$(rpm·- | ||
| 0003b960:· | 0003b960:·7166·2024·6669·6c65·735f·7769·7468·5f69··qf·$files_with_i | ||
| 0003b970:·6 | 0003b970:·6e63·6f72·7265·6374·5f68·6173·6820·7c20··ncorrect_hash·|· | ||
| 0003b980:·7 | 0003b980:·7472·2027·5c6e·2720·2720·2729·220a·0a20··tr·'\n'·'·')"..· | ||
| 0003b990:· | 0003b990:·2020·200a·2020·2020·7975·6d20·7265·696e·····.····yum·rein | ||
| 0003b9a0:· | 0003b9a0:·7374·616c·6c20·2d79·2024·7061·636b·6167··stall·-y·$packag | ||
| 0003b9b0:· | 0003b9b0:·6573·5f74·6f5f·7265·696e·7374·616c·6c0a··es_to_reinstall. | ||
| 0003b9c0:· | 0003b9c0:·2020·2020·0a66·690a·0a65·6c73·650a·2020······.fi..else.·· | ||
| 0003b9d0:· | 0003b9d0:·2020·2667·743b·2661·6d70·3b32·2065·6368····>&2·ech | ||
| 0003b9e0:· | 0003b9e0:·6f20·2752·656d·6564·6961·7469·6f6e·2069··o·'Remediation·i | ||
| 0003b9f0:· | 0003b9f0:·7320·6e6f·7420·6170·706c·6963·6162·6c65··s·not·applicable | ||
| 0003ba00:· | 0003ba00:·2c20·6e6f·7468·696e·6720·7761·7320·646f··,·nothing·was·do | ||
| 0003ba10:·6 | 0003ba10:·6e65·270a·6669·0a3c·2f63·6f64·653e·3c2f··ne'.fi.</code></ | ||
| 0003ba20:· | 0003ba20:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0003ba30:· | 0003ba30:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0003ba40:· | 0003ba40:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| 0003ba50:· | 0003ba50:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | ||
| 0003ba60:· | 0003ba60:·2d74·6172·6765·743d·2223·6964·6d31·3630··-target="#idm160 | ||
| 0003ba70:· | 0003ba70:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003ba80:· | 0003ba80:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ba90:· | 0003ba90:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003baa0:· | 0003baa0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bab0:·6 | 0003bab0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bac0:· | 0003bac0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bad0:· | 0003bad0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003bae0:· | 0003bae0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003baf0:· | 0003baf0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003bb00:·6 | 0003bb00:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003bb10:· | 0003bb10:·7073·6522·2069·643d·2269·646d·3136·3039··pse"·id="idm1609 | ||
| 0003bb20:· | 0003bb20:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003bb30:· | 0003bb30:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003bb40:· | 0003bb40:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003bb50:· | 0003bb50:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003bb60:· | 0003bb60:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003bb70:· | 0003bb70:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003bb80:· | 0003bb80:·6869·6768·3c2f·7464·3e3c·2f74·723e·3c74··high</td></tr><t | ||
| 0003bb90:· | 0003bb90:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bba0:· | 0003bba0:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | ||
| 0003bbb0:· | 0003bbb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bbc0:· | 0003bbc0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003bbd0:· | 0003bbd0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003bbe0:·3 | 0003bbe0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003bbf0:· | 0003bbf0:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003bc00:· | 0003bc00:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003bc10:· | 0003bc10:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003bc20:· | 0003bc20:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | ||
| 0003bc30:·6 | 0003bc30:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | ||
| 0003bc40:· | 0003bc40:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | ||
| 0003bc50:· | 0003bc50:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | ||
| 0003bc60:· | 0003bc60:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | ||
| 0003bc70:· | 0003bc70:·434a·4953·2d35·2e31·302e·342e·310a·2020··CJIS-5.10.4.1.·· | ||
| 0003bc80:· | 0003bc80:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bc90:·2 | 0003bc90:·2e33·2e38·0a20·202d·204e·4953·542d·3830··.3.8.··-·NIST-80 | ||
| 0003bca0:· | 0003bca0:·302d·3137·312d·332e·342e·310a·2020·2d20··0-171-3.4.1.··-· | ||
| 0003bcb0:· | 0003bcb0:·4e49·5354·2d38·3030·2d35·332d·4155·2d39··NIST-800-53-AU-9 | ||
| 0003bcc0:· | 0003bcc0:·2833·290a·2020·2d20·4e49·5354·2d38·3030··(3).··-·NIST-800 | ||
| 0003bcd0:· | 0003bcd0:·2d35·332d·434d·2d36·2863·290a·2020·2d20··-53-CM-6(c).··-· | ||
| 0003bce0:· | 0003bce0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | ||
| 0003bcf0:·2 | 0003bcf0:·2864·290a·2020·2d20·4e49·5354·2d38·3030··(d).··-·NIST-800 | ||
| 0003bd00:· | 0003bd00:·2d35·332d·5349·2d37·0a20·202d·204e·4953··-53-SI-7.··-·NIS | ||
| 0003bd10:· | 0003bd10:·542d·3830·302d·3533·2d53·492d·3728·3129··T-800-53-SI-7(1) | ||
| 0003bd20:· | 0003bd20:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bd30:· | 0003bd30:·2d53·492d·3728·3629·0a20·202d·2050·4349··-SI-7(6).··-·PCI | ||
| 0003bd40:·2 | 0003bd40:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003bd50:· | 0003bd50:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003bd60:·2 | 0003bd60:·2e32·0a20·202d·2068·6967·685f·636f·6d70··.2.··-·high_comp | ||
| 0003bd70:·6 | 0003bd70:·6c65·7869·7479·0a20·202d·2068·6967·685f··lexity.··-·high_ | ||
| 0003bd80:· | 0003bd80:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | ||
| 0003bd90:·6 | 0003bd90:·6975·6d5f·6469·7372·7570·7469·6f6e·0a20··ium_disruption.· | ||
| 0003bda0:· | 0003bda0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | ||
| 0003bdb0:· | 0003bdb0:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | ||
| 0003bdc0:· | 0003bdc0:·5f73·7472·6174·6567·790a·2020·2d20·7270··_strategy.··-·rp | ||
| 0003bdd0:·6 | 0003bdd0:·6d5f·7665·7269·6679·5f68·6173·6865·730a··m_verify_hashes. | ||
| 0003bde0:· | 0003bde0:·0a2d·206e·616d·653a·2027·5365·7420·6661··.-·name:·'Set·fa | ||
| 0003bdf0:·6 | 0003bdf0:·6374·3a20·5061·636b·6167·6520·6d61·6e61··ct:·Package·mana | ||
| Max diff block lines reached; 16165574/16220526 bytes (99.66%) of diff not shown. | |||
| Offset 116, 14 lines modified | Offset 116, 33 lines modified | ||
| 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 | 116 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·3.1,·SR·3.3,·SR·3.4,·SR·3.8,·SR·7.6 |
| 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 | 117 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4 |
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 125 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 126 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 127 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 128 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 129 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 130 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 131 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 132 | fi | ||
| 133 | else | ||
| 134 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 135 | fi | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 128 | -·name:·Gather·the·package·facts | 141 | -·name:·Gather·the·package·facts |
| 129 | ··package_facts: | 142 | ··package_facts: |
| Offset 290, 33 lines modified | Offset 309, 14 lines modified | ||
| 290 | ··-·PCI-DSSv4-11.5.2 | 309 | ··-·PCI-DSSv4-11.5.2 |
| 291 | ··-·high_complexity | 310 | ··-·high_complexity |
| 292 | ··-·high_severity | 311 | ··-·high_severity |
| 293 | ··-·medium_disruption | 312 | ··-·medium_disruption |
| 294 | ··-·no_reboot_needed | 313 | ··-·no_reboot_needed |
| 295 | ··-·restrict_strategy | 314 | ··-·restrict_strategy |
| 296 | ··-·rpm_verify_hashes | 315 | ··-·rpm_verify_hashes |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 298 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 299 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 300 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then·get·files·names | ||
| 301 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 302 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 303 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to·new·line | ||
| 304 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 305 | ····yum·reinstall·-y·$packages_to_reinstall | ||
| 306 | fi | ||
| 307 | else | ||
| 308 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 309 | fi | ||
| 310 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 316 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 311 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: | 317 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages,·including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions,·which·can·be·found·with: |
| 312 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 318 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 313 | run·the·following·command·to·determine·which·package·owns·it: | 319 | run·the·following·command·to·determine·which·package·owns·it: |
| 314 | $·rpm·-qf·FILENAME | 320 | $·rpm·-qf·FILENAME |
| 315 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: | 321 | Next,·run·the·following·command·to·reset·its·permissions·to·the·correct·values: |
| 316 | $·sudo·rpm·--restore·PACKAGENAME | 322 | $·sudo·rpm·--restore·PACKAGENAME |
| Offset 335, 14 lines modified | Offset 335, 46 lines modified | ||
| 335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 | 335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.12.1.2,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.5.1,·A.12.6.2,·A.12.7.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.3,·A.9.4.1,·A.9.4.4,·A.9.4.5 |
| 336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 | 336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-003-8·R6,·CIP-007-3·R4,·CIP-007-3·R4.1,·CIP-007-3·R4.2 |
| 337 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 337 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 339 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 339 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 340 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 | 340 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000278-GPOS-00108 |
| 341 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 341 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 347 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 348 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 349 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 350 | declare·-A·SETPERMS_RPM_DICT | ||
| 351 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 352 | #·is·expected·by·the·RPM·database | ||
| 353 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}') | ||
| 354 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 355 | do | ||
| 356 | ········RPM_PACKAGE=$(rpm·-qf·"$FILE_PATH") | ||
| 357 | » #·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about·duplicates. | ||
| 358 | » SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 359 | done | ||
| 360 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 361 | #·correct·values | ||
| 362 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 363 | do | ||
| 364 | ········rpm·--restore·"${RPM_PACKAGE}" | ||
| 365 | done | ||
| 366 | else | ||
| 367 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 368 | fi | ||
| 342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 347 | -·name:·Gather·the·package·facts | 374 | -·name:·Gather·the·package·facts |
| 348 | ··package_facts: | 375 | ··package_facts: |
| Offset 450, 46 lines modified | Offset 482, 14 lines modified | ||
| 450 | ··-·PCI-DSSv4-11.5.2 | 482 | ··-·PCI-DSSv4-11.5.2 |
| 451 | ··-·high_complexity | 483 | ··-·high_complexity |
| 452 | ··-·high_severity | 484 | ··-·high_severity |
| 453 | ··-·medium_disruption | 485 | ··-·medium_disruption |
| 454 | ··-·no_reboot_needed | 486 | ··-·no_reboot_needed |
| 455 | ··-·restrict_strategy | 487 | ··-·restrict_strategy |
| 456 | ··-·rpm_verify_ownership | 488 | ··-·rpm_verify_ownership |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| Max diff block lines reached; 1122871/1130582 bytes (99.32%) of diff not shown. | |||
| Offset 15133, 184 lines modified | Offset 15133, 184 lines modified | ||
| 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b1d0:·3533·3937·2220·7461·6269·6e64·6578·3d22··5397"·tabindex=" | 0003b1d0:·3533·3937·2220·7461·6269·6e64·6578·3d22··5397"·tabindex=" | ||
| 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b230:·6469·6174·696f·6e20·4 | 0003b230:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b240:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b250:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b260:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b270:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b280:·3339·3722·3e3c·7461·626c·6520·636c·6173··397"><table·clas | |||
| 0003b290:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b2e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2 | 0003b240:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d35·3339·3722·3e3c··"·id="idm5397">< | |||
| 0003b290:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b2a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b2b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b2c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b2d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b300:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b310:·7267·6574·3d22·2369·646d·3533·3938·2220··rget="#idm5398"· | |||
| 0003b320:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b330:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b340:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b350:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b360:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b370:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b380:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b390:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b3a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b3b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b3c0:·2069·643d·2269·646d·3533·3938·223e·3c74···id="idm5398"><t | |||
| 0003b3d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b400:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b410:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b420:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b430:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b320:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b330:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b | 0003b440:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b460:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b470:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b480:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b490:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b4a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b4b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b4c0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b4d0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b4e0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b4f0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b500:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b510:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b520:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b530:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b540:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b550:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b560:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b570:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b580:·3339·3922·2074·6162·696e·6465·783d·2230··399"·tabindex="0 | |||
| 0003b590:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b5a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b5b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b5c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b5d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b5e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b5f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b600:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b610:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b620:·7365·2220·6964·3d22·6964·6d35·3339·3922··se"·id="idm5399" | |||
| 0003b630:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b640:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b650:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b660:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b670:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b680:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b | 0003b690:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b370:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b380:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b390:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b3a0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b | 0003b6a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b6b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b6e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b6f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b700:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b720:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b730:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b740:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b750:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b760:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b770:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b780:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b790:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b7a0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b7b0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b7c0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b7d0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b7e0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b7f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b800:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b810:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b820:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b830:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b840:·2223·6964·6d35·3430·3022·2074·6162·696e··"#idm5400"·tabin | |||
| 0003b850:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b860:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b870:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b880:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b890:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| Max diff block lines reached; 20538454/20562494 bytes (99.88%) of diff not shown. | |||
| Offset 15138, 184 lines modified | Offset 15138, 184 lines modified | ||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b220:·6964·6d35·3339·3722·2074·6162·696e·6465··idm5397"·tabinde | 0003b220:·6964·6d35·3339·3722·2074·6162·696e·6465··idm5397"·tabinde | ||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b280:·656d·6564·6961·7469·6f6e·204 | 0003b280:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b290:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b2a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b2b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b2c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2d0:·646d·3533·3937·223e·3c74·6162·6c65·2063··dm5397"><table·c | |||
| 0003b2e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b300:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b310:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b320:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b330:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b340:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b350:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b360:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b370:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b380:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b290:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b2a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b2b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2d0:·7073·6522·2069·643d·2269·646d·3533·3937··pse"·id="idm5397 | |||
| 0003b2e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b300:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b310:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b320:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b330:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b340:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b350:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b360:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b370:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3d0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b400:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b410:·7365·2220·6964·3d22·6964·6d35·3339·3822··se"·id="idm5398" | |||
| 0003b420:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b430:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b440:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b450:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b460:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b470:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b3b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b3c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3d0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b3e0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b3f0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b400:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b410:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b420:·4343·452d·3833·3036·372d·390a·2020·2d20··CCE-83067-9.··-· | |||
| 0003b430:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b440:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b450:·2d31·322d·3031·3034·3939·0a20·202d·204e··-12-010499.··-·N | |||
| 0003b460:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b470:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b480:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b490:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b4a0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b4b0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b4c0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b4d0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b4e0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b4f0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b500:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b510:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b520:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b530:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b540:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b550:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b560:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b570:·3a20·2722·6b65·726e·656c·2d64·6566·6175··:·'"kernel-defau | |||
| 0003b580:·6c74·2220·696e·2061·6e73·6962·6c65·5f66··lt"·in·ansible_f | |||
| 0003b590:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b5a0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003b5b0:·3330·3637·2d39·0a20·202d·2043·4a49·532d··3067-9.··-·CJIS- | |||
| 0003b5c0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5d0:·412d·5354·4947·2d53·4c45·532d·3132·2d30··A-STIG-SLES-12-0 | |||
| 0003b5e0:·3130·3439·390a·2020·2d20·4e49·5354·2d38··10499.··-·NIST-8 | |||
| 0003b5f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b600:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b610:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b620:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b630:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b640:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b650:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b660:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b670:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b680:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b690:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b6a0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b6b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b6c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b6f0:·7461·7267·6574·3d22·2369·646d·3533·3938··target="#idm5398 | |||
| 0003b700:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b710:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b720:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b730:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b740:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b750:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b760:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b770:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b780:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b790:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b7a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b7b0:·3d22·6964·6d35·3339·3822·3e3c·7072·653e··="idm5398"><pre> | |||
| 0003b7c0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b7d0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b7e0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b7f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b800:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b810:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b820:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| Max diff block lines reached; 20763031/20787071 bytes (99.88%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b140:·6d35·3339·3722·2074·6162·696e·6465·783d··m5397"·tabindex= | 0003b140:·6d35·3339·3722·2074·6162·696e·6465·783d··m5397"·tabindex= | ||
| 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b1a0:·6564·6961·7469·6f6e·204 | 0003b1a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b1b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3533·3937·223e··e"·id="idm5397"> | |||
| 0003b200:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b210:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b220:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b230:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b1c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1f0:·3533·3937·223e·3c74·6162·6c65·2063·6c61··5397"><table·cla | |||
| 0003b200:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b210:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b220:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b230:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b240:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b260:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b270:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b280:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b290:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b2a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b2d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b2e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b2f0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b300:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b310:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b320:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b330:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003b340:·452d·3833·3036·372d·390a·2020·2d20·434a··E-83067-9.··-·CJ | |||
| 0003b350:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b360:·4449·5341·2d53·5449·472d·534c·4553·2d31··DISA-STIG-SLES-1 | |||
| 0003b370:·322d·3031·3034·3939·0a20·202d·204e·4953··2-010499.··-·NIS | |||
| 0003b380:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b390:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b3a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b3b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b3c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b3d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b3e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b3f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b400:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b410:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b420:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b430:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b440:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b450:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b460:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b470:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b480:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b490:·2722·6b65·726e·656c·2d64·6566·6175·6c74··'"kernel-default | |||
| 0003b4a0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b4b0:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b4c0:·6167·733a·0a20·202d·2043·4345·2d38·3330··ags:.··-·CCE-830 | |||
| 0003b4d0:·3637·2d39·0a20·202d·2043·4a49·532d·352e··67-9.··-·CJIS-5. | |||
| 0003b4e0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b4f0:·5354·4947·2d53·4c45·532d·3132·2d30·3130··STIG-SLES-12-010 | |||
| 0003b500:·3439·390a·2020·2d20·4e49·5354·2d38·3030··499.··-·NIST-800 | |||
| 0003b510:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b520:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b530:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b540:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b550:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b560:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b570:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b580:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b590:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b5a0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b5b0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b5c0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b5d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b5e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b5f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b600:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b610:·7267·6574·3d22·2369·646d·3533·3938·2220··rget="#idm5398"· | |||
| 0003b620:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b630:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b640:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b650:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b660:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b670:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b680:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b690:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b6a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b6b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b6c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b6d0:·6964·6d35·3339·3822·3e3c·7072·653e·3c63··idm5398"><pre><c | |||
| 0003b6e0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b6f0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b700:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b710:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b720:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b730:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b740:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b | 0003b260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b280:·6172·6765·743d·2223·6964·6d35·3339·3822··arget="#idm5398" | |||
| 0003b290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2f0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b300:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b310:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b320:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b330:·2220·6964·3d22·6964·6d35·3339·3822·3e3c··"·id="idm5398">< | |||
| 0003b340:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b350:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b360:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b370:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| Max diff block lines reached; 8258944/8282984 bytes (99.71%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 44 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 161 | ··package_facts: |
| Offset 162, 44 lines modified | Offset 192, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 194 | ··-·low_complexity |
| 165 | ··-·low_disruption | 195 | ··-·low_disruption |
| 166 | ··-·medium_severity | 196 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/bin/aide·--init | 201 | $·sudo·/usr/bin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| Max diff block lines reached; 955267/960294 bytes (99.48%) of diff not shown. | |||
| Offset 14800, 192 lines modified | Offset 14800, 192 lines modified | ||
| 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039d00:·3831·3136·2220·7461·6269·6e64·6578·3d22··8116"·tabindex=" | 00039d00:·3831·3136·2220·7461·6269·6e64·6578·3d22··8116"·tabindex=" | ||
| 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039d60:·6469·6174·696f·6e20·4 | 00039d60:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039d70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039d80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039da0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039db0:·2220·6964·3d22·6964·6d38·3131·3622·3e3c··"·id="idm8116">< | |||
| 00039dc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039dd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039de0:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 00039df0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e50:·6964·6d38·3131·3722·2074·6162·696e·6465··idm8117"·tabinde | |||
| 00039e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00039e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00039e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00039e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00039ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00039eb0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 00039 | 00039ec0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 00039ed0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039ee0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039ef0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039f00:·6d38·3131·3722·3e3c·7461·626c·6520·636c··m8117"><table·cl | |||
| 00039f10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00039f20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00039f30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00039f40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00039f50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039f60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039f70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039f80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039f90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039fa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039fb0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039fc0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039fd0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039fe0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039ff0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003a000:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003a010:·6e66·2d61·7574·6f6d·6174·6963·0a0a·636c··nf-automatic..cl | |||
| 0003a020:·6173·7320·696e·7374·616c·6c5f·646e·662d··ass·install_dnf- | |||
| 0003a030:·6175·746f·6d61·7469·6320·7b0a·2020·7061··automatic·{.··pa | |||
| 0003a040:·636b·6167·6520·7b20·2764·6e66·2d61·7574··ckage·{·'dnf-aut | |||
| 0003a050:·6f6d·6174·6963·273a·0a20·2020·2065·6e73··omatic':.····ens | |||
| 0003a060:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003a070:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003a080:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a090:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a0a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a0b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a0d0:·6964·6d38·3131·3822·2074·6162·696e·6465··idm8118"·tabinde | |||
| 0003a0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003a0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003a100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003a110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003a120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003a130:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003a140:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003 | 0003a150:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 0003a160:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 0003a170:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003 | 0003a180:·3131·3822·3e3c·7461·626c·6520·636c·6173··118"><table·clas | ||
| 0003 | 0003a190:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003 | 0003a1a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 0003a1b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 0003a1c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 0003a1d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 0003a1e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 0003a1f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 0003a200:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 0003a210:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003a220:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003a230:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003a240:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003a250:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 0003a260:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003a270:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003a280:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003a290:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003a2a0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003a2b0:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | |||
| 0003a2c0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003a2d0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | |||
| 00039eb0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 00039ec0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039ed0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039ee0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039ef0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039f00:·2d39·3134·3736·2d32·0a20·202d·2065·6e61··-91476-2.··-·ena | |||
| 00039f10:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039f20:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039f30:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039f40:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039f50:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039f60:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039f70:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039f80:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039f90:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039fa0:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | |||
| 00039fb0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039fc0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039fd0:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039fe0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039ff0:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 0003a000:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003a010:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a020:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 0003a030:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003a040:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a050:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 0003a060:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a070:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 0003a080:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 0003a090:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003a0a0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| Max diff block lines reached; 2132398/2157542 bytes (98.83%) of diff not shown. | |||
| Offset 88, 14 lines modified | Offset 88, 45 lines modified | ||
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | [[packages]] | ||
| 97 | name·=·"dnf-automatic" | ||
| 98 | version·=·"*" | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 104 | include·install_dnf-automatic | ||
| 105 | class·install_dnf-automatic·{ | ||
| 106 | ··package·{·'dnf-automatic': | ||
| 107 | ····ensure·=>·'installed', | ||
| 108 | ··} | ||
| 109 | } | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 116 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 117 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | zypper·install·-y·"dnf-automatic" | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 100 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 101 | ··package_facts: | 128 | ··package_facts: |
| Offset 122, 45 lines modified | Offset 153, 14 lines modified | ||
| 122 | ··-·CCE-91476-2 | 153 | ··-·CCE-91476-2 |
| 123 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 124 | ··-·low_complexity | 155 | ··-·low_complexity |
| 125 | ··-·low_disruption | 156 | ··-·low_disruption |
| 126 | ··-·medium_severity | 157 | ··-·medium_severity |
| 127 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 128 | ··-·package_dnf-automatic_installed | 159 | ··-·package_dnf-automatic_installed |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 140 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | zypper·install·-y·"dnf-automatic" | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_dnf-automatic | ||
| 151 | class·install_dnf-automatic·{ | ||
| 152 | ··package·{·'dnf-automatic': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 158 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 162 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 159 | automatic.conf. | 163 | automatic.conf. |
| 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 164 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 161 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 165 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 162 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 166 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 171, 14 lines modified | Offset 171, 57 lines modified | ||
| 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 172 | Identifiers:·CCE-91474-7 | 172 | Identifiers:·CCE-91474-7 |
| 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 181 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 182 | found=false | ||
| 183 | #·set·value·in·all·files·if·they·contain·section·or·key | ||
| 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | ||
| 185 | ····if·[·!·-e·"$f"·];·then | ||
| 186 | ········continue | ||
| 187 | ····fi | ||
| 188 | ····#·find·key·in·section·and·change·value | ||
| 189 | ····if·grep·-qzosP·"[[:space:]]*\[commands\]([^\n\[]*\n+)+?[[:space:]]*apply_updates" | ||
| 190 | "$f";·then | ||
| 191 | ············sed·-i·"s/apply_updates[^(\n)]*/apply_updates=yes/"·"$f" | ||
| 192 | ············found=true | ||
| 193 | ····#·find·section·and·add·key·=·value·to·it | ||
| 194 | ····elif·grep·-qs·"[[:space:]]*\[commands\]"·"$f";·then | ||
| 195 | ············sed·-i·"/[[:space:]]*\[commands\]/a·apply_updates=yes"·"$f" | ||
| 196 | ············found=true | ||
| 197 | ····fi | ||
| Max diff block lines reached; 163946/169421 bytes (96.77%) of diff not shown. | |||
| Offset 15170, 184 lines modified | Offset 15170, 184 lines modified | ||
| 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b420:·646d·3533·3937·2220·7461·6269·6e64·6578··dm5397"·tabindex | 0003b420:·646d·3533·3937·2220·7461·6269·6e64·6578··dm5397"·tabindex | ||
| 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b480:·6d65·6469·6174·696f·6e20·4 | 0003b480:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b490:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b4a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4d0:·6d35·3339·3722·3e3c·7461·626c·6520·636c··m5397"><table·cl | |||
| 0003b4e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b4f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b500:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b510:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b520:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b530:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b490:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b4a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b4b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b4c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4d0:·7365·2220·6964·3d22·6964·6d35·3339·3722··se"·id="idm5397" | |||
| 0003b4e0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b4f0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b500:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b510:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b560:·7461·7267·6574·3d22·2369·646d·3533·3938··target="#idm5398 | |||
| 0003b570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5d0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b5e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b600:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b610:·6522·2069·643d·2269·646d·3533·3938·223e··e"·id="idm5398"> | |||
| 0003b620:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b630:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b640:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b650:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b660:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b670:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b680:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b570:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b580:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b690:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b6a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b6b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003b6c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b6d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b6e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b700:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b710:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b720:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b730:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b740:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b750:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b760:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b770:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b780:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b790:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7d0:·6d35·3339·3922·2074·6162·696e·6465·783d··m5399"·tabindex= | |||
| 0003b7e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b7f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b800:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b810:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b820:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b830:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b840:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b850:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b860:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b870:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b880:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b890:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b8c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b8d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b8e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b920:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b | 0003b930:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b5c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b5d0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b5e0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b5f0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b | 0003b940:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b950:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b960:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b970:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b980:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b990:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b9a0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b9b0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b9c0:·2d71·206b·6572·6e65·6c2d·6465·6661·756c··-q·kernel-defaul | |||
| 0003b9d0:·743b·2074·6865·6e0a·0a7a·7970·7065·7220··t;·then..zypper· | |||
| 0003b9e0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b9f0:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003ba00:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003ba10:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003ba20:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003ba30:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003ba40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ba50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ba60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba90:·743d·2223·6964·6d35·3430·3022·2074·6162··t="#idm5400"·tab | |||
| 0003baa0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bab0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bac0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bad0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bae0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| Max diff block lines reached; 19674368/19698408 bytes (99.88%) of diff not shown. | |||
| Offset 15148, 184 lines modified | Offset 15148, 184 lines modified | ||
| 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2c0:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | 0003b2c0:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | ||
| 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b320:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b320:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b330:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b380:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003b390:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b3a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b3b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b330:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b340:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b350:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b360:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b370:·2269·646d·3533·3937·223e·3c74·6162·6c65··"idm5397"><table | |||
| 0003b380:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b390:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b3a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b3b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b3c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b3d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b3e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b3f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b400:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b410:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b420:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b440:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b450:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b460:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b470:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b480:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b490:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b4a0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b4b0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b4c0:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b4d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b4e0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b4f0:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b500:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b510:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b520:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b530:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b540:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b550:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b560:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b570:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b580:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b590:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b5a0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b5b0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b5c0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b5d0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b5e0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b5f0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b600:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b610:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003b620:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b630:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b640:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b650:·2d38·3330·3637·2d39·0a20·202d·2043·4a49··-83067-9.··-·CJI | |||
| 0003b660:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b670:·4953·412d·5354·4947·2d53·4c45·532d·3132··ISA-STIG-SLES-12 | |||
| 0003b680:·2d30·3130·3439·390a·2020·2d20·4e49·5354··-010499.··-·NIST | |||
| 0003b690:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b6a0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b6b0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b6c0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b6d0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b6e0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b6f0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b700:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b710:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b720:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b730:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b740:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b750:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b760:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b770:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b780:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b790:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b7a0:·3938·2220·7461·6269·6e64·6578·3d22·3022··98"·tabindex="0" | |||
| 0003b7b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b7c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b7d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b800:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b810:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b820:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b830:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b | 0003b3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b400:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b410:·3339·3822·2074·6162·696e·6465·783d·2230··398"·tabindex="0 | |||
| 0003b420:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b430:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b440:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b450:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b460:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b470:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b480:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b490:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4b0:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b4c0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b4d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b4f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b500:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b850:·6964·3d22·6964·6d35·3339·3822·3e3c·7072··id="idm5398"><pr | |||
| 0003b860:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b870:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b880:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b890:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b8a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b8b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b8c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 8627600/8651640 bytes (99.72%) of diff not shown. | |||
| Offset 125, 14 lines modified | Offset 125, 44 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 153 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 154 | zypper·install·-y·"aide" | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 164 | ··package_facts: |
| Offset 165, 44 lines modified | Offset 195, 14 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 195 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 196 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 197 | ··-·low_complexity |
| 168 | ··-·low_disruption | 198 | ··-·low_disruption |
| 169 | ··-·medium_severity | 199 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 200 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 201 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 183 | zypper·install·-y·"aide" | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | include·install_aide | ||
| 193 | class·install_aide·{ | ||
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 203 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/bin/aide·--init | 204 | $·sudo·/usr/bin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 205 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 202 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 206 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 203 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 207 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 204 | generated·database·can·be·installed·as·follows: | 208 | generated·database·can·be·installed·as·follows: |
| Offset 230, 14 lines modified | Offset 230, 29 lines modified | ||
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 233 | ·············_\x8c_\x8i_\x8s············1.4.1 | 233 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 240 | zypper·-q·--no-remote·ref | ||
| 241 | zypper·install·-y·"aide" | ||
| 242 | /usr/bin/aide·--init | ||
| 243 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 242 | -·name:·Gather·the·package·facts | 252 | -·name:·Gather·the·package·facts |
| 243 | ··package_facts: | 253 | ··package_facts: |
| Offset 350, 29 lines modified | Offset 365, 14 lines modified | ||
| 350 | ··-·PCI-DSSv4-11.5.2 | 365 | ··-·PCI-DSSv4-11.5.2 |
| 351 | ··-·aide_build_database | 366 | ··-·aide_build_database |
| 352 | ··-·low_complexity | 367 | ··-·low_complexity |
| 353 | ··-·low_disruption | 368 | ··-·low_disruption |
| 354 | ··-·medium_severity | 369 | ··-·medium_severity |
| 355 | ··-·no_reboot_needed | 370 | ··-·no_reboot_needed |
| 356 | ··-·restrict_strategy | 371 | ··-·restrict_strategy |
| Max diff block lines reached; 1037018/1042167 bytes (99.51%) of diff not shown. | |||
| Offset 15134, 184 lines modified | Offset 15134, 184 lines modified | ||
| 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b1e0:·743d·2223·6964·6d35·3339·3722·2074·6162··t="#idm5397"·tab | 0003b1e0:·743d·2223·6964·6d35·3339·3722·2074·6162··t="#idm5397"·tab | ||
| 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b250:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3533·3937·223e·3c70·7265·3e3c·636f·6465··5397"><pre><code | |||
| 0003b2b0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b2c0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b2d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b250:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b260:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b270:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b290:·643d·2269·646d·3533·3937·223e·3c74·6162··d="idm5397"><tab | |||
| 0003b2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b310:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b320:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b330:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b340:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b360:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b370:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b380:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b390:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b3a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b3b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b3c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b3d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b3e0:·2020·2d20·4343·452d·3833·3036·372d·390a····-·CCE-83067-9. | |||
| 0003b3f0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b400:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b410:·534c·4553·2d31·322d·3031·3034·3939·0a20··SLES-12-010499.· | |||
| 0003b420:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b430:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b440:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b450:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b460:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b470:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b480:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b490:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b4a0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b4b0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b4c0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b4d0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b4e0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b4f0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b500:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b510:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b520:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b530:·7768·656e·3a20·2722·6b65·726e·656c·2d64··when:·'"kernel-d | |||
| 0003b540:·6566·6175·6c74·2220·696e·2061·6e73·6962··efault"·in·ansib | |||
| 0003b550:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b560:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b570:·4345·2d38·3330·3637·2d39·0a20·202d·2043··CE-83067-9.··-·C | |||
| 0003b580:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b590:·2044·4953·412d·5354·4947·2d53·4c45·532d···DISA-STIG-SLES- | |||
| 0003b5a0:·3132·2d30·3130·3439·390a·2020·2d20·4e49··12-010499.··-·NI | |||
| 0003b5b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b5c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b5d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b5e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b5f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b600:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b610:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b620:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b630:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b640:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b650:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b660:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b670:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b680:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b690:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b | 0003b310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b330:·6d35·3339·3822·2074·6162·696e·6465·783d··m5398"·tabindex= | |||
| 0003b340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b390:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b3a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b6b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b6c0:·3533·3938·2220·7461·6269·6e64·6578·3d22··5398"·tabindex=" | |||
| 0003b6d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b6e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b6f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b700:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b710:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b720:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b730:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b740:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b750:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b760:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b770:·2220·6964·3d22·6964·6d35·3339·3822·3e3c··"·id="idm5398">< | |||
| 0003b780:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b790:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b7a0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b7b0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b7c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b7d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b7e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b7f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b800:·7267·6574·3d22·2369·646d·3533·3939·2220··rget="#idm5399"· | |||
| 0003b810:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b820:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b830:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b840:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b850:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| Max diff block lines reached; 8369921/8393961 bytes (99.71%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 44 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 161 | ··package_facts: |
| Offset 162, 44 lines modified | Offset 192, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 194 | ··-·low_complexity |
| 165 | ··-·low_disruption | 195 | ··-·low_disruption |
| 166 | ··-·medium_severity | 196 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/bin/aide·--init | 201 | $·sudo·/usr/bin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 199 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 203 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 200 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 204 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 201 | generated·database·can·be·installed·as·follows: | 205 | generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| Max diff block lines reached; 1004135/1009284 bytes (99.49%) of diff not shown. | |||
| Offset 15161, 184 lines modified | Offset 15161, 184 lines modified | ||
| 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b390:·2369·646d·3533·3937·2220·7461·6269·6e64··#idm5397"·tabind | 0003b390:·2369·646d·3533·3937·2220·7461·6269·6e64··#idm5397"·tabind | ||
| 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b400:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b410:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b420:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b430:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b440:·6964·6d35·3339·3722·3e3c·7461·626c·6520··idm5397"><table· | |||
| 0003b450:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b460:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b470:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b480:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b490:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b4a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b4b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b4c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b4d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b4f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b400:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b450:·3722·3e3c·7072·653e·3c63·6f64·653e·0a5b··7"><pre><code>.[ | |||
| 0003b460:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b470:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b480:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b4e0:·3938·2220·7461·6269·6e64·6578·3d22·3022··98"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b580:·7073·6522·2069·643d·2269·646d·3533·3938··pse"·id="idm5398 | |||
| 0003b590:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b5b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b5c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b5d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b5 | 0003b5e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b520:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b530:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b540:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b550:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b560:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b570:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b580:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b590:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 0003b5a0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b5b0:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b5c0:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 0003b5d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b5e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b5f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b600:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b610:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b620:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b630:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b640:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b650:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b660:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b670:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b680:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b690:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b6a0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b6b0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b6c0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b6d0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b6e0:·6e3a·2027·226b·6572·6e65·6c2d·6465·6661··n:·'"kernel-defa | |||
| 0003b6f0:·756c·7422·2069·6e20·616e·7369·626c·655f··ult"·in·ansible_ | |||
| 0003b700:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003b710:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b720:·3833·3036·372d·390a·2020·2d20·434a·4953··83067-9.··-·CJIS | |||
| 0003b730:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b740:·5341·2d53·5449·472d·534c·4553·2d31·322d··SA-STIG-SLES-12- | |||
| 0003b750:·3031·3034·3939·0a20·202d·204e·4953·542d··010499.··-·NIST- | |||
| 0003b760:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b770:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b780:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b790:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b7a0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b7b0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b7c0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b7d0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b7e0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b7f0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b800:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b810:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b820:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b830:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b840:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b850:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b860:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b870:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003b880:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b890:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b8a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b8b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b8c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b8d0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b8e0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b8f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b900:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b910:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b920:·643d·2269·646d·3533·3938·223e·3c70·7265··d="idm5398"><pre | |||
| 0003b930:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b940:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b950:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b960:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b970:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b980:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b990:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| Max diff block lines reached; 19591547/19615587 bytes (99.88%) of diff not shown. | |||
| Offset 15218, 414 lines modified | Offset 15218, 414 lines modified | ||
| 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3035··-target="#idm505 | 0003b710:·2d74·6172·6765·743d·2223·6964·6d35·3035··-target="#idm505 | ||
| 0003b720:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b720:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b730:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b740:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b750:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b760:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | Diff chunk too large, falling back to line-by-line diff (400 lines added, 400 lines removed) | |
| 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b770:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b780:·7469·6f6e·20 | 0003b780:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | ||
| 0003b790:·7 | 0003b790:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b7a0:· | 0003b7a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b7b0:·6 | 0003b7b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b7c0:· | 0003b7c0:·2220·6964·3d22·6964·6d35·3035·3622·3e3c··"·id="idm5056">< | ||
| 0003b7d0:·2 | 0003b7d0:·7072·653e·3c63·6f64·653e·2320·5265·6d65··pre><code>#·Reme | ||
| 0003b7e0:· | 0003b7e0:·6469·6174·696f·6e20·6973·2061·7070·6c69··diation·is·appli | ||
| 0003b7f0:· | 0003b7f0:·6361·626c·6520·6f6e·6c79·2069·6e20·6365··cable·only·in·ce | ||
| 0003b800:· | 0003b800:·7274·6169·6e20·706c·6174·666f·726d·730a··rtain·platforms. | ||
| 0003b810:·6 | 0003b810:·6966·2021·2028·207b·2072·706d·202d·2d71··if·!·(·{·rpm·--q | ||
| 0003b820:· | 0003b820:·7569·6574·202d·7120·6b65·726e·656c·203b··uiet·-q·kernel·; | ||
| 0003b830:· | 0003b830:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b840:·7 | 0003b840:·706d·202d·2d71·7569·6574·202d·7120·7270··pm·--quiet·-q·rp | ||
| 0003b850:· | 0003b850:·6d2d·6f73·7472·6565·203b·7d20·2661·6d70··m-ostree·;}·& | ||
| 0003b860:·3 | 0003b860:·3b26·616d·703b·207b·2072·706d·202d·2d71··;&·{·rpm·--q | ||
| 0003b870:· | 0003b870:·7569·6574·202d·7120·626f·6f74·6320·3b7d··uiet·-q·bootc·;} | ||
| 0003b880:· | 0003b880:·2026·616d·703b·2661·6d70·3b20·7b20·2120···&&·{·!· | ||
| 0003b890:· | 0003b890:·7270·6d20·2d2d·7175·6965·7420·2d71·206f··rpm·--quiet·-q·o | ||
| 0003b8a0:·7 | 0003b8a0:·7065·6e73·6869·6674·2d6b·7562·656c·6574··penshift-kubelet | ||
| 0003b8b0:· | 0003b8b0:·203b·7d20·293b·2074·6865·6e0a·0a23·2046···;}·);·then..#·F | ||
| 0003b8c0:·6 | 0003b8c0:·696e·6420·7768·6963·6820·6669·6c65·7320··ind·which·files· | ||
| 0003b8d0:· | 0003b8d0:·6861·7665·2069·6e63·6f72·7265·6374·2068··have·incorrect·h | ||
| 0003b8e0:·6 | 0003b8e0:·6173·6820·286e·6f74·2069·6e20·2f65·7463··ash·(not·in·/etc | ||
| 0003b8f0:· | 0003b8f0:·2c20·6265·6361·7573·6520·6f66·2074·6865··,·because·of·the | ||
| 0003b900:· | 0003b900:·2073·7973·7465·6d20·7265·6c61·7465·6420···system·related· | ||
| 0003b910:· | 0003b910:·636f·6e66·6967·2066·696c·6573·2920·616e··config·files)·an | ||
| 0003b920:· | 0003b920:·6420·7468·656e·2067·6574·2066·696c·6573··d·then·get·files | ||
| 0003b930:· | 0003b930:·206e·616d·6573·0a66·696c·6573·5f77·6974···names.files_wit | ||
| 0003b940:· | 0003b940:·685f·696e·636f·7272·6563·745f·6861·7368··h_incorrect_hash | ||
| 0003b950:· | 0003b950:·3d22·2428·7270·6d20·2d56·6120·2d2d·6e6f··="$(rpm·-Va·--no | ||
| 0003b960:· | 0003b960:·636f·6e66·6967·207c·2067·7265·7020·2d45··config·|·grep·-E | ||
| 0003b970:· | 0003b970:·2027·5e2e·2e35·2720·7c20·6177·6b20·277b···'^..5'·|·awk·'{ | ||
| 0003b980:· | 0003b980:·7072·696e·7420·244e·467d·2720·2922·0a0a··print·$NF}'·)".. | ||
| 0003b990:· | 0003b990:·6966·205b·202d·6e20·2224·6669·6c65·735f··if·[·-n·"$files_ | ||
| 0003b9a0:· | 0003b9a0:·7769·7468·5f69·6e63·6f72·7265·6374·5f68··with_incorrect_h | ||
| 0003b9b0:· | 0003b9b0:·6173·6822·205d·3b20·7468·656e·0a20·2020··ash"·];·then.··· | ||
| 0003b9c0:·2 | 0003b9c0:·2023·2046·726f·6d20·6669·6c65·7320·6e61···#·From·files·na | ||
| 0003b9d0:· | 0003b9d0:·6d65·7320·6765·7420·7061·636b·6167·6520··mes·get·package· | ||
| 0003b9e0:· | 0003b9e0:·6e61·6d65·7320·616e·6420·6368·616e·6765··names·and·change | ||
| 0003b9f0:·2 | 0003b9f0:·206e·6577·6c69·6e65·2074·6f20·7370·6163···newline·to·spac | ||
| 0003ba00:· | 0003ba00:·652c·2062·6563·6175·7365·2072·706d·2077··e,·because·rpm·w | ||
| 0003ba10:· | 0003ba10:·7269·7465·7320·6561·6368·2070·6163·6b61··rites·each·packa | ||
| 0003ba20:· | 0003ba20:·6765·2074·6f20·6e65·7720·6c69·6e65·0a20··ge·to·new·line.· | ||
| 0003ba30:· | 0003ba30:·2020·2070·6163·6b61·6765·735f·746f·5f72·····packages_to_r | ||
| 0003ba40:· | 0003ba40:·6569·6e73·7461·6c6c·3d22·2428·7270·6d20··einstall="$(rpm· | ||
| 0003ba50:· | 0003ba50:·2d71·6620·2466·696c·6573·5f77·6974·685f··-qf·$files_with_ | ||
| 0003ba60:· | 0003ba60:·696e·636f·7272·6563·745f·6861·7368·207c··incorrect_hash·| | ||
| 0003ba70:· | 0003ba70:·2074·7220·275c·6e27·2027·2027·2922·0a0a···tr·'\n'·'·')".. | ||
| 0003ba80:· | 0003ba80:·2020·2020·0a20·2020·207a·7970·7065·7220······.····zypper· | ||
| 0003ba90:·6 | 0003ba90:·696e·7374·616c·6c20·2d66·202d·7920·2470··install·-f·-y·$p | ||
| 0003baa0:· | 0003baa0:·6163·6b61·6765·735f·746f·5f72·6569·6e73··ackages_to_reins | ||
| 0003bab0:·6 | 0003bab0:·7461·6c6c·0a20·2020·200a·6669·0a0a·656c··tall.····.fi..el | ||
| 0003bac0:· | 0003bac0:·7365·0a20·2020·2026·6774·3b26·616d·703b··se.····>& | ||
| 0003bad0:· | 0003bad0:·3220·6563·686f·2027·5265·6d65·6469·6174··2·echo·'Remediat | ||
| 0003bae0:· | 0003bae0:·696f·6e20·6973·206e·6f74·2061·7070·6c69··ion·is·not·appli | ||
| 0003baf0:·6 | 0003baf0:·6361·626c·652c·206e·6f74·6869·6e67·2077··cable,·nothing·w | ||
| 0003bb00:· | 0003bb00:·6173·2064·6f6e·6527·0a66·690a·3c2f·636f··as·done'.fi.</co | ||
| 0003bb10:·6 | 0003bb10:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003bb20:· | 0003bb20:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003bb30:· | 0003bb30:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003bb40:·6 | 0003bb40:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003bb50:· | 0003bb50:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003bb60:·6 | 0003bb60:·646d·3530·3537·2220·7461·6269·6e64·6578··dm5057"·tabindex | ||
| 0003bb70:· | 0003bb70:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003bb80:·6 | 0003bb80:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003bb90:· | 0003bb90:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003bba0:· | 0003bba0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003bbb0:·6 | 0003bbb0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003bbc0:·6 | 0003bbc0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003bbd0:· | 0003bbd0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003bbe0:· | 0003bbe0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003bbf0:· | 0003bbf0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003bc00:·6 | 0003bc00:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003bc10:· | 0003bc10:·6d35·3035·3722·3e3c·7461·626c·6520·636c··m5057"><table·cl | ||
| 0003bc20:·6 | 0003bc20:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003bc30:· | 0003bc30:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003bc40:· | 0003bc40:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003bc50:· | 0003bc50:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003bc60:·3 | 0003bc60:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003bc70:· | 0003bc70:·3e3c·7464·3e68·6967·683c·2f74·643e·3c2f··><td>high</td></ | ||
| 0003bc80:· | 0003bc80:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003bc90:· | 0003bc90:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003bca0:· | 0003bca0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003bcb0:· | 0003bcb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003bcc0:· | 0003bcc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003bcd0:· | 0003bcd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003bce0:· | 0003bce0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bcf0:·2 | 0003bcf0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003bd00:· | 0003bd00:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003bd10:· | 0003bd10:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | ||
| 0003bd20:· | 0003bd20:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | ||
| 0003bd30:· | 0003bd30:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | ||
| 0003bd40:·6 | 0003bd40:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | ||
| 0003bd50:· | 0003bd50:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | ||
| 0003bd60:·0a20·202d·20 | 0003bd60:·0a20·202d·2043·4345·2d39·3136·3332·2d30··.··-·CCE-91632-0 | ||
| 0003bd70:· | 0003bd70:·0a20·202d·2043·4a49·532d·352e·3130·2e34··.··-·CJIS-5.10.4 | ||
| 0003bd80:· | 0003bd80:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | ||
| 0003bd90:· | 0003bd90:·3137·312d·332e·332e·380a·2020·2d20·4e49··171-3.3.8.··-·NI | ||
| 0003bda0:· | 0003bda0:·5354·2d38·3030·2d31·3731·2d33·2e34·2e31··ST-800-171-3.4.1 | ||
| 0003bdb0:· | 0003bdb0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bdc0:·2 | 0003bdc0:·2d41·552d·3928·3329·0a20·202d·204e·4953··-AU-9(3).··-·NIS | ||
| 0003bdd0:· | 0003bdd0:·542d·3830·302d·3533·2d43·4d2d·3628·6329··T-800-53-CM-6(c) | ||
| 0003bde0:· | 0003bde0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bdf0:· | 0003bdf0:·2d43·4d2d·3628·6429·0a20·202d·204e·4953··-CM-6(d).··-·NIS | ||
| 0003be00:· | 0003be00:·542d·3830·302d·3533·2d53·492d·370a·2020··T-800-53-SI-7.·· | ||
| 0003be10:· | 0003be10:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003be20:· | 0003be20:·2d37·2831·290a·2020·2d20·4e49·5354·2d38··-7(1).··-·NIST-8 | ||
| 0003be30:· | 0003be30:·3030·2d35·332d·5349·2d37·2836·290a·2020··00-53-SI-7(6).·· | ||
| 0003be40:·2 | 0003be40:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | ||
| 0003be50:·2 | 0003be50:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | ||
| 0003be60:· | 0003be60:·2d31·312e·352e·320a·2020·2d20·6869·6768··-11.5.2.··-·high | ||
| 0003be70:· | 0003be70:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | ||
| 0003be80:·6 | 0003be80:·6869·6768·5f73·6576·6572·6974·790a·2020··high_severity.·· | ||
| 0003be90:· | 0003be90:·2d20·6d65·6469·756d·5f64·6973·7275·7074··-·medium_disrupt | ||
| 0003bea0:·6 | 0003bea0:·696f·6e0a·2020·2d20·6e6f·5f72·6562·6f6f··ion.··-·no_reboo | ||
| 0003beb0:· | 0003beb0:·745f·6e65·6564·6564·0a20·202d·2072·6573··t_needed.··-·res | ||
| 0003bec0:· | 0003bec0:·7472·6963·745f·7374·7261·7465·6779·0a20··trict_strategy.· | ||
| 0003bed0:· | 0003bed0:·202d·2072·706d·5f76·6572·6966·795f·6861···-·rpm_verify_ha | ||
| 0003bee0:· | 0003bee0:·7368·6573·0a0a·2d20·6e61·6d65·3a20·2753··shes..-·name:·'S | ||
| Max diff block lines reached; 18534927/18590707 bytes (99.70%) of diff not shown. | |||
| Offset 134, 14 lines modified | Offset 134, 36 lines modified | ||
| 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 134 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 135 | ····························A.14.2.3,·A.14.2.4 | 135 | ····························A.14.2.3,·A.14.2.4 |
| 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 136 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 137 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 139 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 144 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 145 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 146 | get·files·names | ||
| 147 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 148 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 149 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 150 | new·line | ||
| 151 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 152 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 153 | fi | ||
| 154 | else | ||
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 156 | fi | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 146 | -·name:·Gather·the·package·facts | 162 | -·name:·Gather·the·package·facts |
| 147 | ··package_facts: | 163 | ··package_facts: |
| Offset 314, 36 lines modified | Offset 336, 14 lines modified | ||
| 314 | ··-·PCI-DSSv4-11.5.2 | 336 | ··-·PCI-DSSv4-11.5.2 |
| 315 | ··-·high_complexity | 337 | ··-·high_complexity |
| 316 | ··-·high_severity | 338 | ··-·high_severity |
| 317 | ··-·medium_disruption | 339 | ··-·medium_disruption |
| 318 | ··-·no_reboot_needed | 340 | ··-·no_reboot_needed |
| 319 | ··-·restrict_strategy | 341 | ··-·restrict_strategy |
| 320 | ··-·rpm_verify_hashes | 342 | ··-·rpm_verify_hashes |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 322 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 323 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 324 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 325 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 326 | get·files·names | ||
| 327 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 328 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 329 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 330 | new·line | ||
| 331 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 332 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 333 | fi | ||
| 334 | else | ||
| 335 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 336 | fi | ||
| 337 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 343 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 338 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 344 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 339 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 345 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 340 | which·can·be·found·with: | 346 | which·can·be·found·with: |
| 341 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 347 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 342 | run·the·following·command·to·determine·which·package·owns·it: | 348 | run·the·following·command·to·determine·which·package·owns·it: |
| 343 | $·rpm·-qf·FILENAME | 349 | $·rpm·-qf·FILENAME |
| Offset 425, 14 lines modified | Offset 425, 53 lines modified | ||
| 425 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 425 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 426 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 426 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 428 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 428 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 429 | ····························SRG-OS-000278-GPOS-00108 | 429 | ····························SRG-OS-000278-GPOS-00108 |
| 430 | ·············_\x8c_\x8i_\x8s············6.1.1 | 430 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 437 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 438 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 439 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 440 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 441 | declare·-A·SETPERMS_RPM_DICT | ||
| 442 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 443 | #·is·expected·by·the·RPM·database | ||
| 444 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 445 | $NF·}') | ||
| 446 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 447 | do | ||
| 448 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 449 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 450 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 451 | ········do | ||
| 452 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 453 | duplicates. | ||
| 454 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 455 | ········done | ||
| 456 | done | ||
| 457 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 458 | #·correct·values | ||
| 459 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 460 | do | ||
| 461 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 462 | done | ||
| 463 | else | ||
| 464 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 465 | fi | ||
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 437 | -·name:·Gather·the·package·facts | 471 | -·name:·Gather·the·package·facts |
| 438 | ··package_facts: | 472 | ··package_facts: |
| Max diff block lines reached; 1463909/1469562 bytes (99.62%) of diff not shown. | |||
| Offset 15163, 415 lines modified | Offset 15163, 415 lines modified | ||
| 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b3a0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b3b0:·6964·6d35·3035·3622·2074·6162·696e·6465··idm5056"·tabinde | 0003b3b0:·6964·6d35·3035·3622·2074·6162·696e·6465··idm5056"·tabinde | ||
| 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b3c0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b3d0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b3e0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3f0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b400:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b410:·656d·6564·6961·7469·6f6e·20 | 0003b410:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | ||
| 0003b420:· | 0003b420:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | ||
| 0003b430:·6 | 0003b430:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003b440:· | 0003b440:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003b450:· | 0003b450:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | ||
| 0003b460:· | 0003b460:·3035·3622·3e3c·7072·653e·3c63·6f64·653e··056"><pre><code> | ||
| 0003b470:· | 0003b470:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | ||
| 0003b480:· | 0003b480:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | ||
| 0003b490:· | 0003b490:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | ||
| 0003b4a0:·6 | 0003b4a0:·666f·726d·730a·6966·2021·2028·207b·2072··forms.if·!·(·{·r | ||
| 0003b4b0:· | 0003b4b0:·706d·202d·2d71·7569·6574·202d·7120·6b65··pm·--quiet·-q·ke | ||
| 0003b4c0:· | 0003b4c0:·726e·656c·203b·7d20·2661·6d70·3b26·616d··rnel·;}·&&am | ||
| 0003b4d0:· | 0003b4d0:·703b·207b·2072·706d·202d·2d71·7569·6574··p;·{·rpm·--quiet | ||
| 0003b4e0:· | 0003b4e0:·202d·7120·7270·6d2d·6f73·7472·6565·203b···-q·rpm-ostree·; | ||
| 0003b4f0:· | 0003b4f0:·7d20·2661·6d70·3b26·616d·703b·207b·2072··}·&&·{·r | ||
| 0003b500:· | 0003b500:·706d·202d·2d71·7569·6574·202d·7120·626f··pm·--quiet·-q·bo | ||
| 0003b510:· | 0003b510:·6f74·6320·3b7d·2026·616d·703b·2661·6d70··otc·;}·&& | ||
| 0003b520:· | 0003b520:·3b20·7b20·2120·7270·6d20·2d2d·7175·6965··;·{·!·rpm·--quie | ||
| 0003b530:·74 | 0003b530:·7420·2d71·206f·7065·6e73·6869·6674·2d6b··t·-q·openshift-k | ||
| 0003b540:· | 0003b540:·7562·656c·6574·203b·7d20·293b·2074·6865··ubelet·;}·);·the | ||
| 0003b550:· | 0003b550:·6e0a·0a23·2046·696e·6420·7768·6963·6820··n..#·Find·which· | ||
| 0003b560:· | 0003b560:·6669·6c65·7320·6861·7665·2069·6e63·6f72··files·have·incor | ||
| 0003b570:·7 | 0003b570:·7265·6374·2068·6173·6820·286e·6f74·2069··rect·hash·(not·i | ||
| 0003b580:· | 0003b580:·6e20·2f65·7463·2c20·6265·6361·7573·6520··n·/etc,·because· | ||
| 0003b590:· | 0003b590:·6f66·2074·6865·2073·7973·7465·6d20·7265··of·the·system·re | ||
| 0003b5a0:·6 | 0003b5a0:·6c61·7465·6420·636f·6e66·6967·2066·696c··lated·config·fil | ||
| 0003b5b0:· | 0003b5b0:·6573·2920·616e·6420·7468·656e·2067·6574··es)·and·then·get | ||
| 0003b5c0:· | 0003b5c0:·2066·696c·6573·206e·616d·6573·0a66·696c···files·names.fil | ||
| 0003b5d0:· | 0003b5d0:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b5e0:· | 0003b5e0:·745f·6861·7368·3d22·2428·7270·6d20·2d56··t_hash="$(rpm·-V | ||
| 0003b5f0:· | 0003b5f0:·6120·2d2d·6e6f·636f·6e66·6967·207c·2067··a·--noconfig·|·g | ||
| 0003b600:· | 0003b600:·7265·7020·2d45·2027·5e2e·2e35·2720·7c20··rep·-E·'^..5'·|· | ||
| 0003b610:· | 0003b610:·6177·6b20·277b·7072·696e·7420·244e·467d··awk·'{print·$NF} | ||
| 0003b620:· | 0003b620:·2720·2922·0a0a·6966·205b·202d·6e20·2224··'·)"..if·[·-n·"$ | ||
| 0003b630:· | 0003b630:·6669·6c65·735f·7769·7468·5f69·6e63·6f72··files_with_incor | ||
| 0003b640:· | 0003b640:·7265·6374·5f68·6173·6822·205d·3b20·7468··rect_hash"·];·th | ||
| 0003b650:· | 0003b650:·656e·0a20·2020·2023·2046·726f·6d20·6669··en.····#·From·fi | ||
| 0003b660:· | 0003b660:·6c65·7320·6e61·6d65·7320·6765·7420·7061··les·names·get·pa | ||
| 0003b670:· | 0003b670:·636b·6167·6520·6e61·6d65·7320·616e·6420··ckage·names·and· | ||
| 0003b680:· | 0003b680:·6368·616e·6765·206e·6577·6c69·6e65·2074··change·newline·t | ||
| 0003b690:· | 0003b690:·6f20·7370·6163·652c·2062·6563·6175·7365··o·space,·because | ||
| 0003b6a0:· | 0003b6a0:·2072·706d·2077·7269·7465·7320·6561·6368···rpm·writes·each | ||
| 0003b6b0:· | 0003b6b0:·2070·6163·6b61·6765·2074·6f20·6e65·7720···package·to·new· | ||
| 0003b6c0:·6 | 0003b6c0:·6c69·6e65·0a20·2020·2070·6163·6b61·6765··line.····package | ||
| 0003b6d0:· | 0003b6d0:·735f·746f·5f72·6569·6e73·7461·6c6c·3d22··s_to_reinstall=" | ||
| 0003b6e0:·2 | 0003b6e0:·2428·7270·6d20·2d71·6620·2466·696c·6573··$(rpm·-qf·$files | ||
| 0003b6f0:· | 0003b6f0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b700:·6 | 0003b700:·6861·7368·207c·2074·7220·275c·6e27·2027··hash·|·tr·'\n'·' | ||
| 0003b710:· | 0003b710:·2027·2922·0a0a·2020·2020·0a20·2020·207a···')"..····.····z | ||
| 0003b720:· | 0003b720:·7970·7065·7220·696e·7374·616c·6c20·2d66··ypper·install·-f | ||
| 0003b730:· | 0003b730:·202d·7920·2470·6163·6b61·6765·735f·746f···-y·$packages_to | ||
| 0003b740:·5 | 0003b740:·5f72·6569·6e73·7461·6c6c·0a20·2020·200a··_reinstall.····. | ||
| 0003b750:·6 | 0003b750:·6669·0a0a·656c·7365·0a20·2020·2026·6774··fi..else.····> | ||
| 0003b760:· | 0003b760:·3b26·616d·703b·3220·6563·686f·2027·5265··;&2·echo·'Re | ||
| 0003b770:·6 | 0003b770:·6d65·6469·6174·696f·6e20·6973·206e·6f74··mediation·is·not | ||
| 0003b780:· | 0003b780:·2061·7070·6c69·6361·626c·652c·206e·6f74···applicable,·not | ||
| 0003b790:·6 | 0003b790:·6869·6e67·2077·6173·2064·6f6e·6527·0a66··hing·was·done'.f | ||
| 0003b7a0:·6 | 0003b7a0:·690a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··i.</code></pre>< | ||
| 0003b7b0:·2 | 0003b7b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003b7c0:· | 0003b7c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003b7d0:· | 0003b7d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003b7e0:·61 | 0003b7e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003b7f0:· | 0003b7f0:·6574·3d22·2369·646d·3530·3537·2220·7461··et="#idm5057"·ta | ||
| 0003b800:· | 0003b800:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b810:·2 | 0003b810:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b820:· | 0003b820:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b830:· | 0003b830:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b840:· | 0003b840:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b850:· | 0003b850:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b860:· | 0003b860:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 0003b870:· | 0003b870:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b880:·6 | 0003b880:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b890:·6 | 0003b890:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b8a0:·6 | 0003b8a0:·6964·3d22·6964·6d35·3035·3722·3e3c·7461··id="idm5057"><ta | ||
| 0003b8b0:· | 0003b8b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0003b8c0:· | 0003b8c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0003b8d0:· | 0003b8d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| 0003b8e0:· | 0003b8e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | ||
| 0003b8f0:· | 0003b8f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | ||
| 0003b900:· | 0003b900:·793a·3c2f·7468·3e3c·7464·3e68·6967·683c··y:</th><td>high< | ||
| 0003b910:· | 0003b910:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b920:· | 0003b920:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b930:· | 0003b930:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003b940:·3 | 0003b940:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b950:· | 0003b950:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b960:· | 0003b960:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b970:·3 | 0003b970:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b980:· | 0003b980:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 0003b990:· | 0003b990:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003b9a0:· | 0003b9a0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003b9b0:·53 | 0003b9b0:·653a·2047·6174·6865·7220·7468·6520·7061··e:·Gather·the·pa | ||
| 0003b9c0:· | 0003b9c0:·636b·6167·6520·6661·6374·730a·2020·7061··ckage·facts.··pa | ||
| 0003b9d0:· | 0003b9d0:·636b·6167·655f·6661·6374·733a·0a20·2020··ckage_facts:.··· | ||
| 0003b9e0:· | 0003b9e0:·206d·616e·6167·6572·3a20·6175·746f·0a20···manager:·auto.· | ||
| 0003b9f0:· | 0003b9f0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | ||
| 0003ba00:· | 0003ba00:·3136·3332·2d30·0a20·202d·2043·4a49·532d··1632-0.··-·CJIS- | ||
| 0003ba10:· | 0003ba10:·352e·3130·2e34·2e31·0a20·202d·204e·4953··5.10.4.1.··-·NIS | ||
| 0003ba20:· | 0003ba20:·542d·3830·302d·3137·312d·332e·332e·380a··T-800-171-3.3.8. | ||
| 0003ba30:· | 0003ba30:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 0003ba40:· | 0003ba40:·2d33·2e34·2e31·0a20·202d·204e·4953·542d··-3.4.1.··-·NIST- | ||
| 0003ba50:· | 0003ba50:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | ||
| 0003ba60:· | 0003ba60:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003ba70:· | 0003ba70:·4d2d·3628·6329·0a20·202d·204e·4953·542d··M-6(c).··-·NIST- | ||
| 0003ba80:· | 0003ba80:·3830·302d·3533·2d43·4d2d·3628·6429·0a20··800-53-CM-6(d).· | ||
| 0003ba90:· | 0003ba90:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | ||
| 0003baa0:· | 0003baa0:·492d·370a·2020·2d20·4e49·5354·2d38·3030··I-7.··-·NIST-800 | ||
| 0003bab0:· | 0003bab0:·2d35·332d·5349·2d37·2831·290a·2020·2d20··-53-SI-7(1).··-· | ||
| 0003bac0:· | 0003bac0:·4e49·5354·2d38·3030·2d35·332d·5349·2d37··NIST-800-53-SI-7 | ||
| 0003bad0:· | 0003bad0:·2836·290a·2020·2d20·5043·492d·4453·532d··(6).··-·PCI-DSS- | ||
| 0003bae0:· | 0003bae0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | ||
| 0003baf0:· | 0003baf0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | ||
| 0003bb00:· | 0003bb00:·2d20·6869·6768·5f63·6f6d·706c·6578·6974··-·high_complexit | ||
| 0003bb10:· | 0003bb10:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0003bb20:·6 | 0003bb20:·6974·790a·2020·2d20·6d65·6469·756d·5f64··ity.··-·medium_d | ||
| 0003bb30:· | 0003bb30:·6973·7275·7074·696f·6e0a·2020·2d20·6e6f··isruption.··-·no | ||
| 0003bb40:· | 0003bb40:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | ||
| 0003bb50:· | 0003bb50:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | ||
| 0003bb60:· | 0003bb60:·7465·6779·0a20·202d·2072·706d·5f76·6572··tegy.··-·rpm_ver | ||
| 0003bb70:· | 0003bb70:·6966·795f·6861·7368·6573·0a0a·2d20·6e61··ify_hashes..-·na | ||
| Max diff block lines reached; 17192083/17248001 bytes (99.68%) of diff not shown. | |||
| Offset 124, 14 lines modified | Offset 124, 36 lines modified | ||
| 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 124 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 125 | ····························A.14.2.3,·A.14.2.4 | 125 | ····························A.14.2.3,·A.14.2.4 |
| 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 126 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 127 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 133 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 134 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 135 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 136 | get·files·names | ||
| 137 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 138 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 139 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 140 | new·line | ||
| 141 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 142 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 143 | fi | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 136 | -·name:·Gather·the·package·facts | 152 | -·name:·Gather·the·package·facts |
| 137 | ··package_facts: | 153 | ··package_facts: |
| Offset 304, 36 lines modified | Offset 326, 14 lines modified | ||
| 304 | ··-·PCI-DSSv4-11.5.2 | 326 | ··-·PCI-DSSv4-11.5.2 |
| 305 | ··-·high_complexity | 327 | ··-·high_complexity |
| 306 | ··-·high_severity | 328 | ··-·high_severity |
| 307 | ··-·medium_disruption | 329 | ··-·medium_disruption |
| 308 | ··-·no_reboot_needed | 330 | ··-·no_reboot_needed |
| 309 | ··-·restrict_strategy | 331 | ··-·restrict_strategy |
| 310 | ··-·rpm_verify_hashes | 332 | ··-·rpm_verify_hashes |
| 311 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 312 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 313 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 314 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 315 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 316 | get·files·names | ||
| 317 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 318 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 319 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 320 | new·line | ||
| 321 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 322 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 323 | fi | ||
| 324 | else | ||
| 325 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 326 | fi | ||
| 327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 328 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 329 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 335 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 330 | which·can·be·found·with: | 336 | which·can·be·found·with: |
| 331 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 337 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 332 | run·the·following·command·to·determine·which·package·owns·it: | 338 | run·the·following·command·to·determine·which·package·owns·it: |
| 333 | $·rpm·-qf·FILENAME | 339 | $·rpm·-qf·FILENAME |
| Offset 415, 14 lines modified | Offset 415, 53 lines modified | ||
| 415 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 415 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 416 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 416 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 417 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 417 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 418 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 418 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 419 | ····························SRG-OS-000278-GPOS-00108 | 419 | ····························SRG-OS-000278-GPOS-00108 |
| 420 | ·············_\x8c_\x8i_\x8s············6.1.1 | 420 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 421 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 421 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 427 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 428 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 429 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 430 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 431 | declare·-A·SETPERMS_RPM_DICT | ||
| 432 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 433 | #·is·expected·by·the·RPM·database | ||
| 434 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 435 | $NF·}') | ||
| 436 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 437 | do | ||
| 438 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 439 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 440 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 441 | ········do | ||
| 442 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 443 | duplicates. | ||
| 444 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 445 | ········done | ||
| 446 | done | ||
| 447 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 448 | #·correct·values | ||
| 449 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 450 | do | ||
| 451 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 452 | done | ||
| 453 | else | ||
| 454 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 455 | fi | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 427 | -·name:·Gather·the·package·facts | 461 | -·name:·Gather·the·package·facts |
| 428 | ··package_facts: | 462 | ··package_facts: |
| Max diff block lines reached; 1292369/1298022 bytes (99.56%) of diff not shown. | |||
| Offset 14957, 120 lines modified | Offset 14957, 120 lines modified | ||
| 0003a6c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003a6c0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003a6d0:·2223·6964·6d32·3436·3035·2220·7461·6269··"#idm24605"·tabi | 0003a6d0:·2223·6964·6d32·3436·3035·2220·7461·6269··"#idm24605"·tabi | ||
| 0003a6e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003a6e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003a6f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003a6f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003a700:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003a700:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003a710:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003a710:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003a720:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003a720:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003a730:·223e·5265·6d65·6469·6174·696f·6e20· | 0003a730:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | ||
| 0003a740:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003a750:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a760:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a770:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a780:·3d22·6964·6d32·3436·3035·223e·3c74·6162··="idm24605"><tab | |||
| 0003a790:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a7a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a7b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a7c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a7d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a7e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a7f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a | 0003a740:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003a750:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003a760:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003a770:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003a780:·646d·3234·3630·3522·3e3c·7461·626c·6520··dm24605"><table· | |||
| 0003a790:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003a7a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003a7b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003a7c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003a7d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a7e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a7f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003a800:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003a810:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003a820:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003a830:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003a840:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003a850:·7465·6779·3a3c·2f74·683e·3c74·643e·636f··tegy:</th><td>co | |||
| 0003a860:·6e66·6967·7572·653c·2f74·643e·3c2f·7472··nfigure</td></tr | |||
| 0003a870:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003a880:·6f64·653e·6368·6772·7020·3020·2f65·7463··ode>chgrp·0·/etc | |||
| 0003a890:·2f70·6173·7377·640a·3c2f·636f·6465·3e3c··/passwd.</code>< | |||
| 0003a8a0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a8b0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003a8c0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a8d0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003a8e0:·612d·7461·7267·6574·3d22·2369·646d·3234··a-target="#idm24 | |||
| 0003a8f0:·3630·3622·2074·6162·696e·6465·783d·2230··606"·tabindex="0 | |||
| 0003a900:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a910:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a920:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a930:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a940:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a950:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003a960:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a970:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a980:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a990:·6c61·7073·6522·2069·643d·2269·646d·3234··lapse"·id="idm24 | |||
| 0003a9a0:·3630·3622·3e3c·7461·626c·6520·636c·6173··606"><table·clas | |||
| 0003a9b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a9c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a9d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a9e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a9f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a | 0003aa00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003aa10:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a820:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003a830:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a840:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003a850:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003a860:·3e63·6f6e·6669·6775·7265·3c2f·7464·3e3c··>configure</td>< | |||
| 0003a870:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003a880:·3e3c·636f·6465·3e2d·206e·616d·653a·2054··><code>-·name:·T | |||
| 0003a890:·6573·7420·666f·7220·6578·6973·7465·6e63··est·for·existenc | |||
| 0003a8a0:·6520·2f65·7463·2f70·6173·7377·640a·2020··e·/etc/passwd.·· | |||
| 0003a8b0:·7374·6174·3a0a·2020·2020·7061·7468·3a20··stat:.····path:· | |||
| 0003a8c0:·2f65·7463·2f70·6173·7377·640a·2020·7265··/etc/passwd.··re | |||
| 0003a8d0:·6769·7374·6572·3a20·6669·6c65·5f65·7869··gister:·file_exi | |||
| 0003a8e0:·7374·730a·2020·7461·6773·3a0a·2020·2d20··sts.··tags:.··-· | |||
| 0003a8f0:·4343·452d·3931·3632·372d·300a·2020·2d20··CCE-91627-0.··-· | |||
| 0003a900:·434a·4953·2d35·2e35·2e32·2e32·0a20·202d··CJIS-5.5.2.2.··- | |||
| 0003a910:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 0003a920:·3628·3129·0a20·202d·204e·4953·542d·3830··6(1).··-·NIST-80 | |||
| 0003a930:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003a940:·2050·4349·2d44·5353·2d52·6571·2d38·2e37···PCI-DSS-Req-8.7 | |||
| 0003a950:·2e63·0a20·202d·2050·4349·2d44·5353·7634··.c.··-·PCI-DSSv4 | |||
| 0003a960:·2d32·2e32·0a20·202d·2050·4349·2d44·5353··-2.2.··-·PCI-DSS | |||
| 0003a970:·7634·2d32·2e32·2e36·0a20·202d·2063·6f6e··v4-2.2.6.··-·con | |||
| 0003a980:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | |||
| 0003a990:·2020·2d20·6669·6c65·5f67·726f·7570·6f77····-·file_groupow | |||
| 0003a9a0:·6e65·725f·6574·635f·7061·7373·7764·0a20··ner_etc_passwd.· | |||
| 0003a9b0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003a9c0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003a9d0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003a9e0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003a9f0:·7265·626f·6f74·5f6e·6565·6465·640a·0a2d··reboot_needed..- | |||
| 0003aa00:·206e·616d·653a·2045·6e73·7572·6520·6772···name:·Ensure·gr | |||
| 0003aa10:·6f75·7020·6f77·6e65·7220·3020·6f6e·202f··oup·owner·0·on·/ | |||
| 0003aa20:·6574·632f·7061·7373·7764·0a20·2066·696c··etc/passwd.··fil | |||
| 0003aa30:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | |||
| 0003aa40:·632f·7061·7373·7764·0a20·2020·2067·726f··c/passwd.····gro | |||
| 0003aa50:·7570·3a20·2730·270a·2020·7768·656e·3a20··up:·'0'.··when:· | |||
| 0003aa60:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | |||
| 0003aa70:·2069·7320·6465·6669·6e65·6420·616e·6420···is·defined·and· | |||
| 0003aa80:·6669·6c65·5f65·7869·7374·732e·7374·6174··file_exists.stat | |||
| 0003aa90:·2e65·7869·7374·730a·2020·7461·6773·3a0a··.exists.··tags:. | |||
| 0003aaa0:·2020·2d20·4343·452d·3931·3632·372d·300a····-·CCE-91627-0. | |||
| 0003aab0:·2020·2d20·434a·4953·2d35·2e35·2e32·2e32····-·CJIS-5.5.2.2 | |||
| 0003aac0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003aad0:·2d41·432d·3628·3129·0a20·202d·204e·4953··-AC-6(1).··-·NIS | |||
| 0003aae0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003aaf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003ab00:·2d38·2e37·2e63·0a20·202d·2050·4349·2d44··-8.7.c.··-·PCI-D | |||
| 0003ab10:·5353·7634·2d32·2e32·0a20·202d·2050·4349··SSv4-2.2.··-·PCI | |||
| 0003ab20:·2d44·5353·7634·2d32·2e32·2e36·0a20·202d··-DSSv4-2.2.6.··- | |||
| 0003ab30:·2063·6f6e·6669·6775·7265·5f73·7472·6174···configure_strat | |||
| 0003ab40:·6567·790a·2020·2d20·6669·6c65·5f67·726f··egy.··-·file_gro | |||
| 0003ab50:·7570·6f77·6e65·725f·6574·635f·7061·7373··upowner_etc_pass | |||
| 0003ab60:·7764·0a20·202d·206c·6f77·5f63·6f6d·706c··wd.··-·low_compl | |||
| 0003ab70:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003ab80:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003ab90:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003aba0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003abb0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003abc0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003abd0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003abe0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 31934/47142 bytes (67.74%) of diff not shown. | |||
| Offset 108, 14 lines modified | Offset 108, 20 lines modified | ||
| 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 112 | ·············_\x8c_\x8i_\x8s············6.1.2 | 112 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 120 | chgrp·0·/etc/passwd | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 120 | -·name:·Test·for·existence·/etc/passwd | 126 | -·name:·Test·for·existence·/etc/passwd |
| 121 | ··stat: | 127 | ··stat: |
| Offset 151, 20 lines modified | Offset 157, 14 lines modified | ||
| 151 | ··-·PCI-DSSv4-2.2.6 | 157 | ··-·PCI-DSSv4-2.2.6 |
| 152 | ··-·configure_strategy | 158 | ··-·configure_strategy |
| 153 | ··-·file_groupowner_etc_passwd | 159 | ··-·file_groupowner_etc_passwd |
| 154 | ··-·low_complexity | 160 | ··-·low_complexity |
| 155 | ··-·low_disruption | 161 | ··-·low_disruption |
| 156 | ··-·medium_severity | 162 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 163 | chgrp·0·/etc/passwd | ||
| 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·U\x8Us\x8se\x8er\x8r·W\x8Wh\x8ho\x8o·O\x8Ow\x8wn\x8ns\x8s·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 165 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: | 165 | To·properly·set·the·owner·of·/etc/passwd,·run·the·command: |
| 166 | $·sudo·chown·root·/etc/passwd | 166 | $·sudo·chown·root·/etc/passwd |
| 167 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are | 167 | ·············The·/etc/passwd·file·contains·information·about·the·users·that·are |
| 168 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for | 168 | Rationale:···configured·on·the·system.·Protection·of·this·file·is·critical·for |
| 169 | ·············system·security. | 169 | ·············system·security. |
| 170 | Severity: ···medium | 170 | Severity: ···medium |
| Offset 187, 14 lines modified | Offset 187, 20 lines modified | ||
| 187 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 187 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 188 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 188 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 189 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 189 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 190 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 190 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 191 | ·············_\x8c_\x8i_\x8s············6.1.2 | 191 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 192 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 192 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 193 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 193 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 199 | chown·0·/etc/passwd | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 199 | -·name:·Test·for·existence·/etc/passwd | 205 | -·name:·Test·for·existence·/etc/passwd |
| 200 | ··stat: | 206 | ··stat: |
| Offset 230, 20 lines modified | Offset 236, 14 lines modified | ||
| 230 | ··-·PCI-DSSv4-2.2.6 | 236 | ··-·PCI-DSSv4-2.2.6 |
| 231 | ··-·configure_strategy | 237 | ··-·configure_strategy |
| 232 | ··-·file_owner_etc_passwd | 238 | ··-·file_owner_etc_passwd |
| 233 | ··-·low_complexity | 239 | ··-·low_complexity |
| 234 | ··-·low_disruption | 240 | ··-·low_disruption |
| 235 | ··-·medium_severity | 241 | ··-·medium_severity |
| 236 | ··-·no_reboot_needed | 242 | ··-·no_reboot_needed |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 242 | chown·0·/etc/passwd | ||
| 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 243 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·o\x8on\x8n·p\x8pa\x8as\x8ss\x8sw\x8wd\x8d·F\x8Fi\x8il\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 244 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: | 244 | To·properly·set·the·permissions·of·/etc/passwd,·run·the·command: |
| 245 | $·sudo·chmod·0644·/etc/passwd | 245 | $·sudo·chmod·0644·/etc/passwd |
| 246 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world | 246 | ·············If·the·/etc/passwd·file·is·writable·by·a·group-owner·or·the·world |
| 247 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the | 247 | Rationale:···the·risk·of·its·compromise·is·increased.·The·file·contains·the |
| 248 | ·············list·of·accounts·on·the·system·and·associated·information,·and | 248 | ·············list·of·accounts·on·the·system·and·associated·information,·and |
| 249 | ·············protection·of·this·file·is·critical·for·system·security. | 249 | ·············protection·of·this·file·is·critical·for·system·security. |
| Offset 267, 14 lines modified | Offset 267, 24 lines modified | ||
| 267 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) | 267 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AC-6(1) |
| 268 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 | 268 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5 |
| 269 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c | 269 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.7.c |
| 270 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 270 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 271 | ·············_\x8c_\x8i_\x8s············6.1.2 | 271 | ·············_\x8c_\x8i_\x8s············6.1.2 |
| 272 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 | 272 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R50 |
| 273 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 | 273 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.6,·2.2 |
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 279 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 274 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 275 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 281 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 276 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 282 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 277 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 283 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 278 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 284 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 279 | -·name:·Test·for·existence·/etc/passwd | 285 | -·name:·Test·for·existence·/etc/passwd |
| 280 | ··stat: | 286 | ··stat: |
| Offset 310, 21 lines modified | Offset 320, 11 lines modified | ||
| 310 | ··-·PCI-DSSv4-2.2.6 | 320 | ··-·PCI-DSSv4-2.2.6 |
| 311 | ··-·configure_strategy | 321 | ··-·configure_strategy |
| 312 | ··-·file_permissions_etc_passwd | 322 | ··-·file_permissions_etc_passwd |
| 313 | ··-·low_complexity | 323 | ··-·low_complexity |
| 314 | ··-·low_disruption | 324 | ··-·low_disruption |
| 315 | ··-·medium_severity | 325 | ··-·medium_severity |
| 316 | ··-·no_reboot_needed | 326 | ··-·no_reboot_needed |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | ||
| 322 | chmod·u-xs,g-xws,o-xwt·/etc/passwd | ||
| 323 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 327 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| Max diff block lines reached; 126/5465 bytes (2.31%) of diff not shown. | |||
| Offset 15106, 184 lines modified | Offset 15106, 184 lines modified | ||
| 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b020:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | 0003b020:·2223·6964·6d35·3339·3722·2074·6162·696e··"#idm5397"·tabin | ||
| 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b080:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b0a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b0e0:·3937·223e·3c70·7265·3e3c·636f·6465·3e0a··97"><pre><code>. | |||
| 0003b0f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0d0:·2269·646d·3533·3937·223e·3c74·6162·6c65··"idm5397"><table | |||
| 0003b0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b1b0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b1c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b1d0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b1e0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b1f0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b200:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b210:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b220:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b230:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b240:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b250:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b260:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b270:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b280:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b290:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b2a0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b2b0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b2c0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b2d0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b2e0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b2f0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b300:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b310:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b320:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b330:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b340:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b350:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b360:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b370:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003b380:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b390:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b3a0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b3b0:·2d38·3330·3637·2d39·0a20·202d·2043·4a49··-83067-9.··-·CJI | |||
| 0003b3c0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b3d0:·4953·412d·5354·4947·2d53·4c45·532d·3132··ISA-STIG-SLES-12 | |||
| 0003b3e0:·2d30·3130·3439·390a·2020·2d20·4e49·5354··-010499.··-·NIST | |||
| 0003b3f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b400:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b410:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b420:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b430:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b440:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b450:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b460:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b470:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b480:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b490:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b4a0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b4b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4f0:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b500:·3938·2220·7461·6269·6e64·6578·3d22·3022··98"·tabindex="0" | |||
| 0003b510:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b520:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b530:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b540:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b550:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b560:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b570:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b580:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b590:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b | 0003b150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b160:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b170:·3339·3822·2074·6162·696e·6465·783d·2230··398"·tabindex="0 | |||
| 0003b180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1d0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d35·3339··apse"·id="idm539 | |||
| 0003b220:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b250:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5b0:·6964·3d22·6964·6d35·3339·3822·3e3c·7072··id="idm5398"><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b5d0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b5e0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b5f0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b600:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b610:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b620:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 19946281/19970321 bytes (99.88%) of diff not shown. | |||
| Offset 114, 14 lines modified | Offset 114, 44 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | include·install_aide | ||
| 131 | class·install_aide·{ | ||
| 132 | ··package·{·'aide': | ||
| 133 | ····ensure·=>·'installed', | ||
| 134 | ··} | ||
| 135 | } | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 142 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 143 | zypper·install·-y·"aide" | ||
| 144 | else | ||
| 145 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 146 | fi | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Gather·the·package·facts | 152 | -·name:·Gather·the·package·facts |
| 127 | ··package_facts: | 153 | ··package_facts: |
| Offset 154, 44 lines modified | Offset 184, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 184 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 185 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 186 | ··-·low_complexity |
| 157 | ··-·low_disruption | 187 | ··-·low_disruption |
| 158 | ··-·medium_severity | 188 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 189 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 190 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 171 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 172 | zypper·install·-y·"aide" | ||
| 173 | else | ||
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 175 | fi | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 187 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 188 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 189 | $·sudo·/usr/bin/aide·--init | 193 | $·sudo·/usr/bin/aide·--init |
| 190 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 191 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 195 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 192 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 196 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 193 | generated·database·can·be·installed·as·follows: | 197 | generated·database·can·be·installed·as·follows: |
| Offset 219, 14 lines modified | Offset 219, 29 lines modified | ||
| 219 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 219 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 220 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 221 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 222 | ·············_\x8c_\x8i_\x8s············1.4.1 | 222 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r958794_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 227 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 228 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 229 | zypper·-q·--no-remote·ref | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | /usr/bin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·Gather·the·package·facts | 241 | -·name:·Gather·the·package·facts |
| 232 | ··package_facts: | 242 | ··package_facts: |
| Offset 339, 29 lines modified | Offset 354, 14 lines modified | ||
| 339 | ··-·PCI-DSSv4-11.5.2 | 354 | ··-·PCI-DSSv4-11.5.2 |
| 340 | ··-·aide_build_database | 355 | ··-·aide_build_database |
| 341 | ··-·low_complexity | 356 | ··-·low_complexity |
| 342 | ··-·low_disruption | 357 | ··-·low_disruption |
| 343 | ··-·medium_severity | 358 | ··-·medium_severity |
| 344 | ··-·no_reboot_needed | 359 | ··-·no_reboot_needed |
| 345 | ··-·restrict_strategy | 360 | ··-·restrict_strategy |
| Max diff block lines reached; 1474473/1479630 bytes (99.65%) of diff not shown. | |||
| Offset 15133, 184 lines modified | Offset 15133, 184 lines modified | ||
| 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b1c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b1d0:·3633·3631·2220·7461·6269·6e64·6578·3d22··6361"·tabindex=" | 0003b1d0:·3633·3631·2220·7461·6269·6e64·6578·3d22··6361"·tabindex=" | ||
| 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b1e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b1f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b200:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b210:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b220:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b230:·6469·6174·696f·6e20·4 | 0003b230:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b240:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b250:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b260:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b270:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b280:·3336·3122·3e3c·7461·626c·6520·636c·6173··361"><table·clas | |||
| 0003b290:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b2a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b2e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2 | 0003b240:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b250:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b260:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b270:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b280:·2220·6964·3d22·6964·6d36·3336·3122·3e3c··"·id="idm6361">< | |||
| 0003b290:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b2a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b2b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b2c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b2d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b2e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b2f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b300:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b310:·7267·6574·3d22·2369·646d·3633·3632·2220··rget="#idm6362"· | |||
| 0003b320:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b330:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b340:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b350:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b360:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b370:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b380:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b390:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b3a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b3b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b3c0:·2069·643d·2269·646d·3633·3632·223e·3c74···id="idm6362"><t | |||
| 0003b3d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b3e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b3f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b400:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b410:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b420:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b430:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b320:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b330:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b | 0003b440:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003b450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b460:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003b470:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b480:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b490:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b4a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b4b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b4c0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b4d0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b4e0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b4f0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b500:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b510:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b520:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b530:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b540:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b550:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b560:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b570:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b580:·3336·3322·2074·6162·696e·6465·783d·2230··363"·tabindex="0 | |||
| 0003b590:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b5a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b5b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b5c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b5d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b5e0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b5f0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b600:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b610:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b620:·7365·2220·6964·3d22·6964·6d36·3336·3322··se"·id="idm6363" | |||
| 0003b630:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b640:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b650:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b660:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b670:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b680:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b | 0003b690:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b370:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b380:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b390:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b3a0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b | 0003b6a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b6b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b6e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b6f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b700:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b720:·7265·3e3c·636f·6465·3e23·2052·656d·6564··re><code>#·Remed | |||
| 0003b730:·6961·7469·6f6e·2069·7320·6170·706c·6963··iation·is·applic | |||
| 0003b740:·6162·6c65·206f·6e6c·7920·696e·2063·6572··able·only·in·cer | |||
| 0003b750:·7461·696e·2070·6c61·7466·6f72·6d73·0a69··tain·platforms.i | |||
| 0003b760:·6620·7270·6d20·2d2d·7175·6965·7420·2d71··f·rpm·--quiet·-q | |||
| 0003b770:·206b·6572·6e65·6c2d·6465·6661·756c·743b···kernel-default; | |||
| 0003b780:·2074·6865·6e0a·0a7a·7970·7065·7220·696e···then..zypper·in | |||
| 0003b790:·7374·616c·6c20·2d79·2022·6169·6465·220a··stall·-y·"aide". | |||
| 0003b7a0:·0a65·6c73·650a·2020·2020·2667·743b·2661··.else.····>&a | |||
| 0003b7b0:·6d70·3b32·2065·6368·6f20·2752·656d·6564··mp;2·echo·'Remed | |||
| 0003b7c0:·6961·7469·6f6e·2069·7320·6e6f·7420·6170··iation·is·not·ap | |||
| 0003b7d0:·706c·6963·6162·6c65·2c20·6e6f·7468·696e··plicable,·nothin | |||
| 0003b7e0:·6720·7761·7320·646f·6e65·270a·6669·0a3c··g·was·done'.fi.< | |||
| 0003b7f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b800:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b810:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b820:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b830:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b840:·2223·6964·6d36·3336·3422·2074·6162·696e··"#idm6364"·tabin | |||
| 0003b850:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b860:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b870:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b880:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b890:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| Max diff block lines reached; 20637704/20661744 bytes (99.88%) of diff not shown. | |||
| Offset 15138, 184 lines modified | Offset 15138, 184 lines modified | ||
| 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b210:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b220:·6964·6d36·3336·3122·2074·6162·696e·6465··idm6361"·tabinde | 0003b220:·6964·6d36·3336·3122·2074·6162·696e·6465··idm6361"·tabinde | ||
| 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b230:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b240:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b250:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b260:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b270:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b280:·656d·6564·6961·7469·6f6e·204 | 0003b280:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b290:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b2a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b2b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b2c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2d0:·646d·3633·3631·223e·3c74·6162·6c65·2063··dm6361"><table·c | |||
| 0003b2e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b300:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b310:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b320:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b330:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b340:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b350:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b360:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b370:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b380:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b290:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b2a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b2b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b2c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2d0:·7073·6522·2069·643d·2269·646d·3633·3631··pse"·id="idm6361 | |||
| 0003b2e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b300:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b310:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b320:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b330:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b340:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b350:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b360:·2d74·6172·6765·743d·2223·6964·6d36·3336··-target="#idm636 | |||
| 0003b370:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b380:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b390:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b3a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b3b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b3c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3d0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b400:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b410:·7365·2220·6964·3d22·6964·6d36·3336·3222··se"·id="idm6362" | |||
| 0003b420:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b430:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b440:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b450:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b460:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b470:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b3b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b3c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3d0:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b3e0:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b3f0:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b400:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b410:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b420:·4343·452d·3833·3238·392d·390a·2020·2d20··CCE-83289-9.··-· | |||
| 0003b430:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b440:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b450:·2d31·352d·3031·3034·3139·0a20·202d·204e··-15-010419.··-·N | |||
| 0003b460:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b470:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b480:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b490:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b4a0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b4b0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b4c0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b4d0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b4e0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b4f0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b500:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b510:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b520:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b530:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b540:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b550:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b560:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b570:·3a20·2722·6b65·726e·656c·2d64·6566·6175··:·'"kernel-defau | |||
| 0003b580:·6c74·2220·696e·2061·6e73·6962·6c65·5f66··lt"·in·ansible_f | |||
| 0003b590:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b5a0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 0003b5b0:·3332·3839·2d39·0a20·202d·2043·4a49·532d··3289-9.··-·CJIS- | |||
| 0003b5c0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5d0:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003b5e0:·3130·3431·390a·2020·2d20·4e49·5354·2d38··10419.··-·NIST-8 | |||
| 0003b5f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b600:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b610:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b620:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b630:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b640:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b650:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b660:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b670:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b680:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b690:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b6a0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b6b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b6c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b6f0:·7461·7267·6574·3d22·2369·646d·3633·3632··target="#idm6362 | |||
| 0003b700:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b710:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b720:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b730:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b740:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b750:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b760:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b770:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b780:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b790:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b7a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b7b0:·3d22·6964·6d36·3336·3222·3e3c·7072·653e··="idm6362"><pre> | |||
| 0003b7c0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b7d0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b7e0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b7f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b800:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b810:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b820:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| Max diff block lines reached; 20959385/20983425 bytes (99.89%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b130:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b140:·6d36·3336·3122·2074·6162·696e·6465·783d··m6361"·tabindex= | 0003b140:·6d36·3336·3122·2074·6162·696e·6465·783d··m6361"·tabindex= | ||
| 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b150:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b160:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b170:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b180:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b190:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b1a0:·6564·6961·7469·6f6e·204 | 0003b1a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b1b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3633·3631·223e··e"·id="idm6361"> | |||
| 0003b200:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b210:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b220:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b230:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b240:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b250:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b1c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b1d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b1e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b1f0:·3633·3631·223e·3c74·6162·6c65·2063·6c61··6361"><table·cla | |||
| 0003b200:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b210:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b220:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b230:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b240:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b250:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b260:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b270:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b280:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b290:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b2a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b2c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b2d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b2e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b2f0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b300:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b310:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b320:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b330:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003b340:·452d·3833·3238·392d·390a·2020·2d20·434a··E-83289-9.··-·CJ | |||
| 0003b350:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b360:·4449·5341·2d53·5449·472d·534c·4553·2d31··DISA-STIG-SLES-1 | |||
| 0003b370:·352d·3031·3034·3139·0a20·202d·204e·4953··5-010419.··-·NIS | |||
| 0003b380:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b390:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b3a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b3b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b3c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b3d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b3e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b3f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b400:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b410:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b420:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b430:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b440:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b450:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b460:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b470:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b480:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b490:·2722·6b65·726e·656c·2d64·6566·6175·6c74··'"kernel-default | |||
| 0003b4a0:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b4b0:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b4c0:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 0003b4d0:·3839·2d39·0a20·202d·2043·4a49·532d·352e··89-9.··-·CJIS-5. | |||
| 0003b4e0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b4f0:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 0003b500:·3431·390a·2020·2d20·4e49·5354·2d38·3030··419.··-·NIST-800 | |||
| 0003b510:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b520:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b530:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b540:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b550:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b560:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b570:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b580:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b590:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b5a0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b5b0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b5c0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b5d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b5e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b5f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b600:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b610:·7267·6574·3d22·2369·646d·3633·3632·2220··rget="#idm6362"· | |||
| 0003b620:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b630:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b640:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b650:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b660:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b670:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b680:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b690:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b6a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b6b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b6c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b6d0:·6964·6d36·3336·3222·3e3c·7072·653e·3c63··idm6362"><pre><c | |||
| 0003b6e0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b6f0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b700:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b710:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b720:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b730:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b740:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b | 0003b260:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 0003b270:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b280:·6172·6765·743d·2223·6964·6d36·3336·3222··arget="#idm6362" | |||
| 0003b290:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b2a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b2b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b2c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b2d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b2e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b2f0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b300:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b310:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b320:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b330:·2220·6964·3d22·6964·6d36·3336·3222·3e3c··"·id="idm6362">< | |||
| 0003b340:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b350:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b360:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b370:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| Max diff block lines reached; 8223547/8247587 bytes (99.71%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 44 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 161 | ··package_facts: |
| Offset 162, 44 lines modified | Offset 192, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 194 | ··-·low_complexity |
| 165 | ··-·low_disruption | 195 | ··-·low_disruption |
| 166 | ··-·medium_severity | 196 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/bin/aide·--init | 201 | $·sudo·/usr/bin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 199 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 203 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 200 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 204 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 201 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 205 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| Max diff block lines reached; 950932/955959 bytes (99.47%) of diff not shown. | |||
| Offset 14800, 192 lines modified | Offset 14800, 192 lines modified | ||
| 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00039cf0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00039d00:·3839·3136·2220·7461·6269·6e64·6578·3d22··8916"·tabindex=" | 00039d00:·3839·3136·2220·7461·6269·6e64·6578·3d22··8916"·tabindex=" | ||
| 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039d10:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039d20:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039d30:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039d40:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039d50:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039d60:·6469·6174·696f·6e20·4 | 00039d60:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039d70:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039d80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039d90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039da0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039db0:·2220·6964·3d22·6964·6d38·3931·3622·3e3c··"·id="idm8916">< | |||
| 00039dc0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 00039dd0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 00039de0:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 00039df0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039e50:·6964·6d38·3931·3722·2074·6162·696e·6465··idm8917"·tabinde | |||
| 00039e60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00039e70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00039e80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00039e90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00039ea0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00039eb0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 00039 | 00039ec0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 00039ed0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039ee0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039ef0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039f00:·6d38·3931·3722·3e3c·7461·626c·6520·636c··m8917"><table·cl | |||
| 00039f10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00039f20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00039f30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00039f40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00039f50:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00039f60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00039f70:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00039f80:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00039f90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00039fa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00039fb0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00039fc0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00039fd0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00039fe0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00039ff0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003a000:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f64··nclude·install_d | |||
| 0003a010:·6e66·2d61·7574·6f6d·6174·6963·0a0a·636c··nf-automatic..cl | |||
| 0003a020:·6173·7320·696e·7374·616c·6c5f·646e·662d··ass·install_dnf- | |||
| 0003a030:·6175·746f·6d61·7469·6320·7b0a·2020·7061··automatic·{.··pa | |||
| 0003a040:·636b·6167·6520·7b20·2764·6e66·2d61·7574··ckage·{·'dnf-aut | |||
| 0003a050:·6f6d·6174·6963·273a·0a20·2020·2065·6e73··omatic':.····ens | |||
| 0003a060:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 0003a070:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 0003a080:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a090:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a0a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a0b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a0c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a0d0:·6964·6d38·3931·3822·2074·6162·696e·6465··idm8918"·tabinde | |||
| 0003a0e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003a0f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003a100:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003a110:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003a120:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003a130:·656d·6564·6961·7469·6f6e·2053·6865·6c6c··emediation·Shell | |||
| 0003a140:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003 | 0003a150:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003 | 0003a160:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003 | 0003a170:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | ||
| 0003 | 0003a180:·3931·3822·3e3c·7461·626c·6520·636c·6173··918"><table·clas | ||
| 0003 | 0003a190:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003 | 0003a1a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003 | 0003a1b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003 | 0003a1c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003 | 0003a1d0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003 | 0003a1e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003 | 0003a1f0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003 | 0003a200:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003 | 0003a210:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003 | 0003a220:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003a230:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003a240:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003a250:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 0003a260:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003a270:·653e·3c70·7265·3e3c·636f·6465·3e23·2052··e><pre><code>#·R | ||
| 0003a280:·656d·6564·6961·7469·6f6e·2069·7320·6170··emediation·is·ap | |||
| 0003a290:·706c·6963·6162·6c65·206f·6e6c·7920·696e··plicable·only·in | |||
| 0003a2a0:·2063·6572·7461·696e·2070·6c61·7466·6f72···certain·platfor | |||
| 0003a2b0:·6d73·0a69·6620·2120·2820·7b20·7270·6d20··ms.if·!·(·{·rpm· | |||
| 0003a2c0:·2d2d·7175·6965·7420·2d71·206b·6572·6e65··--quiet·-q·kerne | |||
| 0003a2d0:·6c20·3b7d·2026·616d·703b·2661·6d70·3b20··l·;}·&&· | |||
| 00039eb0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 00039ec0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 00039ed0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 00039ee0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 00039ef0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 00039f00:·2d39·3131·3633·2d36·0a20·202d·2065·6e61··-91163-6.··-·ena | |||
| 00039f10:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 00039f20:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 00039f30:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 00039f40:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 00039f50:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 00039f60:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 00039f70:·7061·636b·6167·655f·646e·662d·6175·746f··package_dnf-auto | |||
| 00039f80:·6d61·7469·635f·696e·7374·616c·6c65·640a··matic_installed. | |||
| 00039f90:·0a2d·206e·616d·653a·2045·6e73·7572·6520··.-·name:·Ensure· | |||
| 00039fa0:·646e·662d·6175·746f·6d61·7469·6320·6973··dnf-automatic·is | |||
| 00039fb0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039fc0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039fd0:·646e·662d·6175·746f·6d61·7469·630a·2020··dnf-automatic.·· | |||
| 00039fe0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00039ff0:·0a20·2077·6865·6e3a·206e·6f74·2028·2022··.··when:·not·(·" | |||
| 0003a000:·6b65·726e·656c·2220·696e·2061·6e73·6962··kernel"·in·ansib | |||
| 0003a010:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003a020:·7320·616e·6420·2272·706d·2d6f·7374·7265··s·and·"rpm-ostre | |||
| 0003a030:·6522·2069·6e20·616e·7369·626c·655f·6661··e"·in·ansible_fa | |||
| 0003a040:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| 0003a050:·2061·6e64·2022·626f·6f74·6322·2069·6e20···and·"bootc"·in· | |||
| 0003a060:·616e·7369·626c·655f·6661·6374·732e·7061··ansible_facts.pa | |||
| 0003a070:·636b·6167·6573·2061·6e64·206e·6f74·2022··ckages·and·not·" | |||
| 0003a080:·6f70·656e·7368·6966·742d·6b75·6265·6c65··openshift-kubele | |||
| 0003a090:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003a0a0:·6374·732e·7061·636b·6167·6573·0a20·2020··cts.packages.··· | |||
| Max diff block lines reached; 2118046/2143190 bytes (98.83%) of diff not shown. | |||
| Offset 88, 14 lines modified | Offset 88, 45 lines modified | ||
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 | 92 | ·············_\x8o_\x8s_\x8p_\x8p···FPT_TUD_EXT.1,·FPT_TUD_EXT.2 |
| 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 93 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 94 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | [[packages]] | ||
| 97 | name·=·"dnf-automatic" | ||
| 98 | version·=·"*" | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 104 | include·install_dnf-automatic | ||
| 105 | class·install_dnf-automatic·{ | ||
| 106 | ··package·{·'dnf-automatic': | ||
| 107 | ····ensure·=>·'installed', | ||
| 108 | ··} | ||
| 109 | } | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 116 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 117 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 118 | zypper·install·-y·"dnf-automatic" | ||
| 119 | else | ||
| 120 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 121 | fi | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 100 | -·name:·Gather·the·package·facts | 127 | -·name:·Gather·the·package·facts |
| 101 | ··package_facts: | 128 | ··package_facts: |
| Offset 122, 45 lines modified | Offset 153, 14 lines modified | ||
| 122 | ··-·CCE-91163-6 | 153 | ··-·CCE-91163-6 |
| 123 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 124 | ··-·low_complexity | 155 | ··-·low_complexity |
| 125 | ··-·low_disruption | 156 | ··-·low_disruption |
| 126 | ··-·medium_severity | 157 | ··-·medium_severity |
| 127 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 128 | ··-·package_dnf-automatic_installed | 159 | ··-·package_dnf-automatic_installed |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 140 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | zypper·install·-y·"dnf-automatic" | ||
| 142 | else | ||
| 143 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 144 | fi | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_dnf-automatic | ||
| 151 | class·install_dnf-automatic·{ | ||
| 152 | ··package·{·'dnf-automatic': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 160 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 161 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 158 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 162 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 159 | automatic.conf. | 163 | automatic.conf. |
| 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 164 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 161 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 165 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 162 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 166 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 171, 14 lines modified | Offset 171, 57 lines modified | ||
| 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates | 171 | Rule·ID:·····xccdf_org.ssgproject.content_rule_dnf-automatic_apply_updates |
| 172 | Identifiers:·CCE-91165-1 | 172 | Identifiers:·CCE-91165-1 |
| 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 | 173 | ·············_\x8i_\x8s_\x8m····0940,·1144,·1467,·1472,·1483,·1493,·1494,·1495 |
| 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) | 174 | ·············_\x8n_\x8i_\x8s_\x8t···SI-2(5),·CM-6(a),·SI-2(c) |
| 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 | 175 | References:··_\x8o_\x8s_\x8p_\x8p···FMT_SMF_EXT.1 |
| 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 | 176 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000805-GPOS-00260 |
| 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 177 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 180 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·- | ||
| 181 | q·bootc·;}·&&·{·!·rpm·--quiet·-q·openshift-kubelet·;}·);·then | ||
| 182 | found=false | ||
| 183 | #·set·value·in·all·files·if·they·contain·section·or·key | ||
| 184 | for·f·in·$(echo·-n·"/etc/dnf/automatic.conf");·do | ||
| 185 | ····if·[·!·-e·"$f"·];·then | ||
| 186 | ········continue | ||
| 187 | ····fi | ||
| 188 | ····#·find·key·in·section·and·change·value | ||
| 189 | ····if·grep·-qzosP·"[[:space:]]*\[commands\]([^\n\[]*\n+)+?[[:space:]]*apply_updates" | ||
| 190 | "$f";·then | ||
| 191 | ············sed·-i·"s/apply_updates[^(\n)]*/apply_updates=yes/"·"$f" | ||
| 192 | ············found=true | ||
| 193 | ····#·find·section·and·add·key·=·value·to·it | ||
| 194 | ····elif·grep·-qs·"[[:space:]]*\[commands\]"·"$f";·then | ||
| 195 | ············sed·-i·"/[[:space:]]*\[commands\]/a·apply_updates=yes"·"$f" | ||
| 196 | ············found=true | ||
| 197 | ····fi | ||
| Max diff block lines reached; 163674/169149 bytes (96.76%) of diff not shown. | |||
| Offset 15170, 184 lines modified | Offset 15170, 184 lines modified | ||
| 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b410:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b420:·646d·3633·3631·2220·7461·6269·6e64·6578··dm6361"·tabindex | 0003b420:·646d·3633·3631·2220·7461·6269·6e64·6578··dm6361"·tabindex | ||
| 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b430:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b440:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b450:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b460:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b470:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b480:·6d65·6469·6174·696f·6e20·4 | 0003b480:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b490:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b4a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b4b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b4c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b4d0:·6d36·3336·3122·3e3c·7461·626c·6520·636c··m6361"><table·cl | |||
| 0003b4e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b4f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b500:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b510:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b520:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b530:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b | 0003b490:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b4a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b4b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b4c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b4d0:·7365·2220·6964·3d22·6964·6d36·3336·3122··se"·id="idm6361" | |||
| 0003b4e0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b4f0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b500:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b510:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b560:·7461·7267·6574·3d22·2369·646d·3633·3632··target="#idm6362 | |||
| 0003b570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5d0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b5e0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5f0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b600:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b610:·6522·2069·643d·2269·646d·3633·3632·223e··e"·id="idm6362"> | |||
| 0003b620:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b630:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b640:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b650:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b660:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b670:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b680:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b570:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b580:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003b690:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003b6a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b6b0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003b6c0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b6d0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b6e0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b6f0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b700:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b710:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b720:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b730:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b740:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b750:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b760:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b770:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b780:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b790:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7d0:·6d36·3336·3322·2074·6162·696e·6465·783d··m6363"·tabindex= | |||
| 0003b7e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b7f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b800:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b810:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b820:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b830:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | |||
| 0003b840:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b850:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b860:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b870:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b880:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b890:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8a0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8b0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b8c0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b8d0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b8e0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b8f0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b920:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b | 0003b930:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003b5c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b5d0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0003b5e0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0003b5f0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0003b | 0003b940:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003b950:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b960:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b970:·3c70·7265·3e3c·636f·6465·3e23·2052·656d··<pre><code>#·Rem | |||
| 0003b980:·6564·6961·7469·6f6e·2069·7320·6170·706c··ediation·is·appl | |||
| 0003b990:·6963·6162·6c65·206f·6e6c·7920·696e·2063··icable·only·in·c | |||
| 0003b9a0:·6572·7461·696e·2070·6c61·7466·6f72·6d73··ertain·platforms | |||
| 0003b9b0:·0a69·6620·7270·6d20·2d2d·7175·6965·7420··.if·rpm·--quiet· | |||
| 0003b9c0:·2d71·206b·6572·6e65·6c2d·6465·6661·756c··-q·kernel-defaul | |||
| 0003b9d0:·743b·2074·6865·6e0a·0a7a·7970·7065·7220··t;·then..zypper· | |||
| 0003b9e0:·696e·7374·616c·6c20·2d79·2022·6169·6465··install·-y·"aide | |||
| 0003b9f0:·220a·0a65·6c73·650a·2020·2020·2667·743b··"..else.····> | |||
| 0003ba00:·2661·6d70·3b32·2065·6368·6f20·2752·656d··&2·echo·'Rem | |||
| 0003ba10:·6564·6961·7469·6f6e·2069·7320·6e6f·7420··ediation·is·not· | |||
| 0003ba20:·6170·706c·6963·6162·6c65·2c20·6e6f·7468··applicable,·noth | |||
| 0003ba30:·696e·6720·7761·7320·646f·6e65·270a·6669··ing·was·done'.fi | |||
| 0003ba40:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ba50:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ba60:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba70:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba80:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba90:·743d·2223·6964·6d36·3336·3422·2074·6162··t="#idm6364"·tab | |||
| 0003baa0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bab0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bac0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bad0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bae0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| Max diff block lines reached; 20233361/20257401 bytes (99.88%) of diff not shown. | |||
| Offset 15148, 184 lines modified | Offset 15148, 184 lines modified | ||
| 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b2b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b2c0:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | 0003b2c0:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | ||
| 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b2d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b2e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b2f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b300:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b310:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b320:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b320:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b330:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b340:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b350:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b360:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b370:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b380:·3631·223e·3c70·7265·3e3c·636f·6465·3e0a··61"><pre><code>. | |||
| 0003b390:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b3a0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b3b0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b3c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b3d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b3e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b330:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b340:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b350:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b360:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b370:·2269·646d·3633·3631·223e·3c74·6162·6c65··"idm6361"><table | |||
| 0003b380:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b390:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b3a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b3b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b3c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b3d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b3e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b3f0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b400:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b410:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b420:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b430:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b440:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b450:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b460:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b470:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b480:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b490:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b4a0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b4b0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b4c0:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b4d0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b4e0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b4f0:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b500:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b510:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b520:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b530:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b540:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b550:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b560:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b570:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b580:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b590:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b5a0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b5b0:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b5c0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b5d0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b5e0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b5f0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b600:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b610:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003b620:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b630:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b640:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b650:·2d38·3332·3839·2d39·0a20·202d·2043·4a49··-83289-9.··-·CJI | |||
| 0003b660:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b670:·4953·412d·5354·4947·2d53·4c45·532d·3135··ISA-STIG-SLES-15 | |||
| 0003b680:·2d30·3130·3431·390a·2020·2d20·4e49·5354··-010419.··-·NIST | |||
| 0003b690:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b6a0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b6b0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b6c0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b6d0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b6e0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b6f0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b700:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b710:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b720:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b730:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b740:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b750:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b760:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b770:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b780:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b790:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b7a0:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | |||
| 0003b7b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b7c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b7d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b7e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b7f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b800:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b810:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b820:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b830:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b | 0003b3f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b400:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b410:·3336·3222·2074·6162·696e·6465·783d·2230··362"·tabindex="0 | |||
| 0003b420:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b430:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b440:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b450:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b460:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b470:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b480:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b490:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4a0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4b0:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b4c0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b4d0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b4e0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b4f0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b500:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b850:·6964·3d22·6964·6d36·3336·3222·3e3c·7072··id="idm6362"><pr | |||
| 0003b860:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b870:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b880:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b890:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b8a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b8b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b8c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 9079329/9103369 bytes (99.74%) of diff not shown. | |||
| Offset 125, 14 lines modified | Offset 125, 44 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 153 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 154 | zypper·install·-y·"aide" | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 138 | ··package_facts: | 164 | ··package_facts: |
| Offset 165, 44 lines modified | Offset 195, 14 lines modified | ||
| 165 | ··-·PCI-DSSv4-11.5.2 | 195 | ··-·PCI-DSSv4-11.5.2 |
| 166 | ··-·enable_strategy | 196 | ··-·enable_strategy |
| 167 | ··-·low_complexity | 197 | ··-·low_complexity |
| 168 | ··-·low_disruption | 198 | ··-·low_disruption |
| 169 | ··-·medium_severity | 199 | ··-·medium_severity |
| 170 | ··-·no_reboot_needed | 200 | ··-·no_reboot_needed |
| 171 | ··-·package_aide_installed | 201 | ··-·package_aide_installed |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 182 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 183 | zypper·install·-y·"aide" | ||
| 184 | else | ||
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 186 | fi | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 192 | include·install_aide | ||
| 193 | class·install_aide·{ | ||
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 203 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/bin/aide·--init | 204 | $·sudo·/usr/bin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 205 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 202 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 206 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 203 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 207 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 204 | generated·database·can·be·installed·as·follows: | 208 | generated·database·can·be·installed·as·follows: |
| Offset 230, 14 lines modified | Offset 230, 29 lines modified | ||
| 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 230 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 231 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 232 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 233 | ·············_\x8c_\x8i_\x8s············1.4.1 | 233 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 234 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 236 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 238 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 239 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 240 | zypper·-q·--no-remote·ref | ||
| 241 | zypper·install·-y·"aide" | ||
| 242 | /usr/bin/aide·--init | ||
| 243 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 244 | else | ||
| 245 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 246 | fi | ||
| 237 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 247 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 238 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 248 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 239 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 249 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 240 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 250 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 241 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 251 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 242 | -·name:·Gather·the·package·facts | 252 | -·name:·Gather·the·package·facts |
| 243 | ··package_facts: | 253 | ··package_facts: |
| Offset 350, 29 lines modified | Offset 365, 14 lines modified | ||
| 350 | ··-·PCI-DSSv4-11.5.2 | 365 | ··-·PCI-DSSv4-11.5.2 |
| 351 | ··-·aide_build_database | 366 | ··-·aide_build_database |
| 352 | ··-·low_complexity | 367 | ··-·low_complexity |
| 353 | ··-·low_disruption | 368 | ··-·low_disruption |
| 354 | ··-·medium_severity | 369 | ··-·medium_severity |
| 355 | ··-·no_reboot_needed | 370 | ··-·no_reboot_needed |
| 356 | ··-·restrict_strategy | 371 | ··-·restrict_strategy |
| Max diff block lines reached; 1084858/1090020 bytes (99.53%) of diff not shown. | |||
| Offset 15134, 184 lines modified | Offset 15134, 184 lines modified | ||
| 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003b1d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003b1e0:·743d·2223·6964·6d36·3336·3122·2074·6162··t="#idm6361"·tab | 0003b1e0:·743d·2223·6964·6d36·3336·3122·2074·6162··t="#idm6361"·tab | ||
| 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003b1f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003b200:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003b210:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003b220:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003b230:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b240:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b250:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3633·3631·223e·3c70·7265·3e3c·636f·6465··6361"><pre><code | |||
| 0003b2b0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b2c0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b2d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b2e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b2f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b300:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b250:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b260:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b270:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b290:·643d·2269·646d·3633·3631·223e·3c74·6162··d="idm6361"><tab | |||
| 0003b2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b310:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b320:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b330:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b340:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b360:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b370:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b380:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b390:·6f64·653e·2d20·6e61·6d65·3a20·4761·7468··ode>-·name:·Gath | |||
| 0003b3a0:·6572·2074·6865·2070·6163·6b61·6765·2066··er·the·package·f | |||
| 0003b3b0:·6163·7473·0a20·2070·6163·6b61·6765·5f66··acts.··package_f | |||
| 0003b3c0:·6163·7473·3a0a·2020·2020·6d61·6e61·6765··acts:.····manage | |||
| 0003b3d0:·723a·2061·7574·6f0a·2020·7461·6773·3a0a··r:·auto.··tags:. | |||
| 0003b3e0:·2020·2d20·4343·452d·3833·3238·392d·390a····-·CCE-83289-9. | |||
| 0003b3f0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b400:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b410:·534c·4553·2d31·352d·3031·3034·3139·0a20··SLES-15-010419.· | |||
| 0003b420:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b430:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b440:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b450:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b460:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b470:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b480:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b490:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b4a0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b4b0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b4c0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b4d0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a0a··aide_installed.. | |||
| 0003b4e0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b4f0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b500:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b510:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b520:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b530:·7768·656e·3a20·2722·6b65·726e·656c·2d64··when:·'"kernel-d | |||
| 0003b540:·6566·6175·6c74·2220·696e·2061·6e73·6962··efault"·in·ansib | |||
| 0003b550:·6c65·5f66·6163·7473·2e70·6163·6b61·6765··le_facts.package | |||
| 0003b560:·7327·0a20·2074·6167·733a·0a20·202d·2043··s'.··tags:.··-·C | |||
| 0003b570:·4345·2d38·3332·3839·2d39·0a20·202d·2043··CE-83289-9.··-·C | |||
| 0003b580:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b590:·2044·4953·412d·5354·4947·2d53·4c45·532d···DISA-STIG-SLES- | |||
| 0003b5a0:·3135·2d30·3130·3431·390a·2020·2d20·4e49··15-010419.··-·NI | |||
| 0003b5b0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b5c0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b5d0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b5e0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b5f0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b600:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b610:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b620:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b630:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b640:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b650:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b660:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b670:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b680:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b690:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b | 0003b310:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b320:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b330:·6d36·3336·3222·2074·6162·696e·6465·783d··m6362"·tabindex= | |||
| 0003b340:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b350:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b360:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b370:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b380:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b390:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b3a0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3b0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b6b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b6c0:·3633·3632·2220·7461·6269·6e64·6578·3d22··6362"·tabindex=" | |||
| 0003b6d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b6e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b6f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b700:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b710:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b720:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003b730:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b740:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b750:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b760:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b770:·2220·6964·3d22·6964·6d36·3336·3222·3e3c··"·id="idm6362">< | |||
| 0003b780:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b790:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b7a0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b7b0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b7c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b7d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b7e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b7f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b800:·7267·6574·3d22·2369·646d·3633·3633·2220··rget="#idm6363"· | |||
| 0003b810:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b820:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b830:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b840:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b850:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| Max diff block lines reached; 8816747/8840787 bytes (99.73%) of diff not shown. | |||
| Offset 122, 14 lines modified | Offset 122, 44 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 150 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 151 | zypper·install·-y·"aide" | ||
| 152 | else | ||
| 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 154 | fi | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Gather·the·package·facts | 160 | -·name:·Gather·the·package·facts |
| 135 | ··package_facts: | 161 | ··package_facts: |
| Offset 162, 44 lines modified | Offset 192, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 192 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 193 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 194 | ··-·low_complexity |
| 165 | ··-·low_disruption | 195 | ··-·low_disruption |
| 166 | ··-·medium_severity | 196 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 197 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 198 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 179 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 180 | zypper·install·-y·"aide" | ||
| 181 | else | ||
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 183 | fi | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | include·install_aide | ||
| 190 | class·install_aide·{ | ||
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/bin/aide·--init | 201 | $·sudo·/usr/bin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 199 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 203 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 200 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 204 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 201 | generated·database·can·be·installed·as·follows: | 205 | generated·database·can·be·installed·as·follows: |
| Offset 227, 14 lines modified | Offset 227, 29 lines modified | ||
| 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 227 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 228 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 229 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 230 | ·············_\x8c_\x8i_\x8s············1.4.1 | 230 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 231 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 233 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 235 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 236 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 237 | zypper·-q·--no-remote·ref | ||
| 238 | zypper·install·-y·"aide" | ||
| 239 | /usr/bin/aide·--init | ||
| 240 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 241 | else | ||
| 242 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 243 | fi | ||
| 234 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 235 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 245 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 236 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 246 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 237 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 247 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 238 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 248 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 239 | -·name:·Gather·the·package·facts | 249 | -·name:·Gather·the·package·facts |
| 240 | ··package_facts: | 250 | ··package_facts: |
| Offset 347, 29 lines modified | Offset 362, 14 lines modified | ||
| 347 | ··-·PCI-DSSv4-11.5.2 | 362 | ··-·PCI-DSSv4-11.5.2 |
| 348 | ··-·aide_build_database | 363 | ··-·aide_build_database |
| 349 | ··-·low_complexity | 364 | ··-·low_complexity |
| 350 | ··-·low_disruption | 365 | ··-·low_disruption |
| 351 | ··-·medium_severity | 366 | ··-·medium_severity |
| 352 | ··-·no_reboot_needed | 367 | ··-·no_reboot_needed |
| 353 | ··-·restrict_strategy | 368 | ··-·restrict_strategy |
| Max diff block lines reached; 1053873/1059035 bytes (99.51%) of diff not shown. | |||
| Offset 15161, 184 lines modified | Offset 15161, 184 lines modified | ||
| 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b380:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b390:·2369·646d·3633·3631·2220·7461·6269·6e64··#idm6361"·tabind | 0003b390:·2369·646d·3633·3631·2220·7461·6269·6e64··#idm6361"·tabind | ||
| 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b3a0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b3b0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b3c0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b3d0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b3e0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4 | 0003b3f0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b400:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b410:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b420:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b430:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b440:·6964·6d36·3336·3122·3e3c·7461·626c·6520··idm6361"><table· | |||
| 0003b450:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b460:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b470:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b480:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b490:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b4a0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b4b0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b4c0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b4d0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b4e0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b4f0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b400:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b410:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b420:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b430:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b440:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b450:·3122·3e3c·7072·653e·3c63·6f64·653e·0a5b··1"><pre><code>.[ | |||
| 0003b460:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b470:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b480:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b490:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4d0:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b4e0:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | |||
| 0003b4f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b500:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b510:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b520:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b530:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b540:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b580:·7073·6522·2069·643d·2269·646d·3633·3632··pse"·id="idm6362 | |||
| 0003b590:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b5a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b5b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b5c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b5d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b5 | 0003b5e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003b520:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b530:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b540:·3e2d·206e·616d·653a·2047·6174·6865·7220··>-·name:·Gather· | |||
| 0003b550:·7468·6520·7061·636b·6167·6520·6661·6374··the·package·fact | |||
| 0003b560:·730a·2020·7061·636b·6167·655f·6661·6374··s.··package_fact | |||
| 0003b570:·733a·0a20·2020·206d·616e·6167·6572·3a20··s:.····manager:· | |||
| 0003b580:·6175·746f·0a20·2074·6167·733a·0a20·202d··auto.··tags:.··- | |||
| 0003b590:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b5a0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b5b0:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b5c0:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b5d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b5e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b5f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b600:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b610:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b620:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b630:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b640:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b650:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b660:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b670:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b680:·655f·696e·7374·616c·6c65·640a·0a2d·206e··e_installed..-·n | |||
| 0003b690:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b6a0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b6b0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b6c0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b6d0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b6e0:·6e3a·2027·226b·6572·6e65·6c2d·6465·6661··n:·'"kernel-defa | |||
| 0003b6f0:·756c·7422·2069·6e20·616e·7369·626c·655f··ult"·in·ansible_ | |||
| 0003b700:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 0003b710:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b720:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b730:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b740:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b750:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b760:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b770:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b780:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b790:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b7a0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b7b0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b7c0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b7d0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b7e0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b7f0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b800:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b810:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b820:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b830:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b840:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b850:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b860:·2d74·6172·6765·743d·2223·6964·6d36·3336··-target="#idm636 | |||
| 0003b870:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b880:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b890:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b8a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b8b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b8c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b8d0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b8e0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b8f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b900:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b910:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b920:·643d·2269·646d·3633·3632·223e·3c70·7265··d="idm6362"><pre | |||
| 0003b930:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b940:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b950:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b960:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b970:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b980:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b990:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| Max diff block lines reached; 20150678/20174718 bytes (99.88%) of diff not shown. | |||
| Offset 15209, 415 lines modified | Offset 15209, 415 lines modified | ||
| 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b680:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b690:·6d36·3032·3022·2074·6162·696e·6465·783d··m6020"·tabindex= | 0003b690:·6d36·3032·3022·2074·6162·696e·6465·783d··m6020"·tabindex= | ||
| 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b6f0:·6564·6961·7469·6f6e·20 | 0003b6f0:·6564·6961·7469·6f6e·2053·6865·6c6c·2073··ediation·Shell·s | ||
| 0003b700:· | 0003b700:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | ||
| 0003b710:·3 | 0003b710:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003b720:· | 0003b720:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003b730:·6 | 0003b730:·6170·7365·2220·6964·3d22·6964·6d36·3032··apse"·id="idm602 | ||
| 0003b740:·3 | 0003b740:·3022·3e3c·7072·653e·3c63·6f64·653e·2320··0"><pre><code>#· | ||
| 0003b750:· | 0003b750:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | ||
| 0003b760:·7 | 0003b760:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | ||
| 0003b770:· | 0003b770:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | ||
| 0003b780:· | 0003b780:·726d·730a·6966·2021·2028·207b·2072·706d··rms.if·!·(·{·rpm | ||
| 0003b790:· | 0003b790:·202d·2d71·7569·6574·202d·7120·6b65·726e···--quiet·-q·kern | ||
| 0003b7a0:· | 0003b7a0:·656c·203b·7d20·2661·6d70·3b26·616d·703b··el·;}·&& | ||
| 0003b7b0:· | 0003b7b0:·207b·2072·706d·202d·2d71·7569·6574·202d···{·rpm·--quiet·- | ||
| 0003b7c0:·7 | 0003b7c0:·7120·7270·6d2d·6f73·7472·6565·203b·7d20··q·rpm-ostree·;}· | ||
| 0003b7d0:· | 0003b7d0:·2661·6d70·3b26·616d·703b·207b·2072·706d··&&·{·rpm | ||
| 0003b7e0:· | 0003b7e0:·202d·2d71·7569·6574·202d·7120·626f·6f74···--quiet·-q·boot | ||
| 0003b7f0:·6 | 0003b7f0:·6320·3b7d·2026·616d·703b·2661·6d70·3b20··c·;}·&&· | ||
| 0003b800:· | 0003b800:·7b20·2120·7270·6d20·2d2d·7175·6965·7420··{·!·rpm·--quiet· | ||
| 0003b810:· | 0003b810:·2d71·206f·7065·6e73·6869·6674·2d6b·7562··-q·openshift-kub | ||
| 0003b820:·65 | 0003b820:·656c·6574·203b·7d20·293b·2074·6865·6e0a··elet·;}·);·then. | ||
| 0003b830:· | 0003b830:·0a23·2046·696e·6420·7768·6963·6820·6669··.#·Find·which·fi | ||
| 0003b840:·6 | 0003b840:·6c65·7320·6861·7665·2069·6e63·6f72·7265··les·have·incorre | ||
| 0003b850:·6 | 0003b850:·6374·2068·6173·6820·286e·6f74·2069·6e20··ct·hash·(not·in· | ||
| 0003b860:· | 0003b860:·2f65·7463·2c20·6265·6361·7573·6520·6f66··/etc,·because·of | ||
| 0003b870:·6 | 0003b870:·2074·6865·2073·7973·7465·6d20·7265·6c61···the·system·rela | ||
| 0003b880:·7 | 0003b880:·7465·6420·636f·6e66·6967·2066·696c·6573··ted·config·files | ||
| 0003b890:·2 | 0003b890:·2920·616e·6420·7468·656e·2067·6574·2066··)·and·then·get·f | ||
| 0003b8a0:· | 0003b8a0:·696c·6573·206e·616d·6573·0a66·696c·6573··iles·names.files | ||
| 0003b8b0:· | 0003b8b0:·5f77·6974·685f·696e·636f·7272·6563·745f··_with_incorrect_ | ||
| 0003b8c0:· | 0003b8c0:·6861·7368·3d22·2428·7270·6d20·2d56·6120··hash="$(rpm·-Va· | ||
| 0003b8d0:· | 0003b8d0:·2d2d·6e6f·636f·6e66·6967·207c·2067·7265··--noconfig·|·gre | ||
| 0003b8e0:· | 0003b8e0:·7020·2d45·2027·5e2e·2e35·2720·7c20·6177··p·-E·'^..5'·|·aw | ||
| 0003b8f0:· | 0003b8f0:·6b20·277b·7072·696e·7420·244e·467d·2720··k·'{print·$NF}'· | ||
| 0003b900:·2 | 0003b900:·2922·0a0a·6966·205b·202d·6e20·2224·6669··)"..if·[·-n·"$fi | ||
| 0003b910:· | 0003b910:·6c65·735f·7769·7468·5f69·6e63·6f72·7265··les_with_incorre | ||
| 0003b920:· | 0003b920:·6374·5f68·6173·6822·205d·3b20·7468·656e··ct_hash"·];·then | ||
| 0003b930:· | 0003b930:·0a20·2020·2023·2046·726f·6d20·6669·6c65··.····#·From·file | ||
| 0003b940:· | 0003b940:·7320·6e61·6d65·7320·6765·7420·7061·636b··s·names·get·pack | ||
| 0003b950:· | 0003b950:·6167·6520·6e61·6d65·7320·616e·6420·6368··age·names·and·ch | ||
| 0003b960:· | 0003b960:·616e·6765·206e·6577·6c69·6e65·2074·6f20··ange·newline·to· | ||
| 0003b970:· | 0003b970:·7370·6163·652c·2062·6563·6175·7365·2072··space,·because·r | ||
| 0003b980:· | 0003b980:·706d·2077·7269·7465·7320·6561·6368·2070··pm·writes·each·p | ||
| 0003b990:· | 0003b990:·6163·6b61·6765·2074·6f20·6e65·7720·6c69··ackage·to·new·li | ||
| 0003b9a0:·6 | 0003b9a0:·6e65·0a20·2020·2070·6163·6b61·6765·735f··ne.····packages_ | ||
| 0003b9b0:· | 0003b9b0:·746f·5f72·6569·6e73·7461·6c6c·3d22·2428··to_reinstall="$( | ||
| 0003b9c0:· | 0003b9c0:·7270·6d20·2d71·6620·2466·696c·6573·5f77··rpm·-qf·$files_w | ||
| 0003b9d0:·6 | 0003b9d0:·6974·685f·696e·636f·7272·6563·745f·6861··ith_incorrect_ha | ||
| 0003b9e0:· | 0003b9e0:·7368·207c·2074·7220·275c·6e27·2027·2027··sh·|·tr·'\n'·'·' | ||
| 0003b9f0:· | 0003b9f0:·2922·0a0a·2020·2020·0a20·2020·207a·7970··)"..····.····zyp | ||
| 0003ba00:· | 0003ba00:·7065·7220·696e·7374·616c·6c20·2d66·202d··per·install·-f·- | ||
| 0003ba10:· | 0003ba10:·7920·2470·6163·6b61·6765·735f·746f·5f72··y·$packages_to_r | ||
| 0003ba20:· | 0003ba20:·6569·6e73·7461·6c6c·0a20·2020·200a·6669··einstall.····.fi | ||
| 0003ba30:· | 0003ba30:·0a0a·656c·7365·0a20·2020·2026·6774·3b26··..else.····>& | ||
| 0003ba40:·6 | 0003ba40:·616d·703b·3220·6563·686f·2027·5265·6d65··amp;2·echo·'Reme | ||
| 0003ba50:· | 0003ba50:·6469·6174·696f·6e20·6973·206e·6f74·2061··diation·is·not·a | ||
| 0003ba60:· | 0003ba60:·7070·6c69·6361·626c·652c·206e·6f74·6869··pplicable,·nothi | ||
| 0003ba70:· | 0003ba70:·6e67·2077·6173·2064·6f6e·6527·0a66·690a··ng·was·done'.fi. | ||
| 0003ba80:· | 0003ba80:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003ba90:· | 0003ba90:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003baa0:·226 | 0003baa0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003bab0:· | 0003bab0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003bac0:·65 | 0003bac0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bad0:· | 0003bad0:·3d22·2369·646d·3630·3231·2220·7461·6269··="#idm6021"·tabi | ||
| 0003bae0:·6 | 0003bae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003baf0:· | 0003baf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003bb00:· | 0003bb00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003bb10:·6 | 0003bb10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003bb20:· | 0003bb20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003bb30:· | 0003bb30:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003bb40:· | 0003bb40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003bb50:· | 0003bb50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003bb60:·6 | 0003bb60:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003bb70:· | 0003bb70:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003bb80:· | 0003bb80:·3d22·6964·6d36·3032·3122·3e3c·7461·626c··="idm6021"><tabl | ||
| 0003bb90:· | 0003bb90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003bba0:· | 0003bba0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003bbb0:· | 0003bbb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003bbc0:· | 0003bbc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003bbd0:· | 0003bbd0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003bbe0:· | 0003bbe0:·3c2f·7468·3e3c·7464·3e68·6967·683c·2f74··</th><td>high</t | ||
| 0003bbf0:· | 0003bbf0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003bc00:· | 0003bc00:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0003bc10:· | 0003bc10:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003bc20:· | 0003bc20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003bc30:· | 0003bc30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003bc40:· | 0003bc40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bc50:· | 0003bc50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003bc60:·3 | 0003bc60:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003bc70:· | 0003bc70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003bc80:· | 0003bc80:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003bc90:·2 | 0003bc90:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | ||
| 0003bca0:· | 0003bca0:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | ||
| 0003bcb0:· | 0003bcb0:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0003bcc0:· | 0003bcc0:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0003bcd0:· | 0003bcd0:·6167·733a·0a20·202d·2043·4345·2d38·3537··ags:.··-·CCE-857 | ||
| 0003bce0:· | 0003bce0:·3838·2d38·0a20·202d·2043·4a49·532d·352e··88-8.··-·CJIS-5. | ||
| 0003bcf0:· | 0003bcf0:·3130·2e34·2e31·0a20·202d·204e·4953·542d··10.4.1.··-·NIST- | ||
| 0003bd00:· | 0003bd00:·3830·302d·3137·312d·332e·332e·380a·2020··800-171-3.3.8.·· | ||
| 0003bd10:· | 0003bd10:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0003bd20:· | 0003bd20:·2e34·2e31·0a20·202d·204e·4953·542d·3830··.4.1.··-·NIST-80 | ||
| 0003bd30:· | 0003bd30:·302d·3533·2d41·552d·3928·3329·0a20·202d··0-53-AU-9(3).··- | ||
| 0003bd40:· | 0003bd40:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | ||
| 0003bd50:· | 0003bd50:·3628·6329·0a20·202d·204e·4953·542d·3830··6(c).··-·NIST-80 | ||
| 0003bd60:· | 0003bd60:·302d·3533·2d43·4d2d·3628·6429·0a20·202d··0-53-CM-6(d).··- | ||
| 0003bd70:· | 0003bd70:·204e·4953·542d·3830·302d·3533·2d53·492d···NIST-800-53-SI- | ||
| 0003bd80:· | 0003bd80:·370a·2020·2d20·4e49·5354·2d38·3030·2d35··7.··-·NIST-800-5 | ||
| 0003bd90:· | 0003bd90:·332d·5349·2d37·2831·290a·2020·2d20·4e49··3-SI-7(1).··-·NI | ||
| 0003bda0:· | 0003bda0:·5354·2d38·3030·2d35·332d·5349·2d37·2836··ST-800-53-SI-7(6 | ||
| 0003bdb0:· | 0003bdb0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | ||
| 0003bdc0:·7 | 0003bdc0:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | ||
| 0003bdd0:·5 | 0003bdd0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | ||
| 0003bde0:·6 | 0003bde0:·6869·6768·5f63·6f6d·706c·6578·6974·790a··high_complexity. | ||
| 0003bdf0:·20 | 0003bdf0:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 0003be00:·7 | 0003be00:·790a·2020·2d20·6d65·6469·756d·5f64·6973··y.··-·medium_dis | ||
| 0003be10:· | 0003be10:·7275·7074·696f·6e0a·2020·2d20·6e6f·5f72··ruption.··-·no_r | ||
| 0003be20:· | 0003be20:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | ||
| 0003be30:· | 0003be30:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | ||
| 0003be40:·6 | 0003be40:·6779·0a20·202d·2072·706d·5f76·6572·6966··gy.··-·rpm_verif | ||
| 0003be50:· | 0003be50:·795f·6861·7368·6573·0a0a·2d20·6e61·6d65··y_hashes..-·name | ||
| Max diff block lines reached; 16133756/16189674 bytes (99.65%) of diff not shown. | |||
| Offset 135, 14 lines modified | Offset 135, 36 lines modified | ||
| 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 135 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 136 | ····························A.14.2.3,·A.14.2.4 | 136 | ····························A.14.2.3,·A.14.2.4 |
| 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 137 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 138 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 140 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 144 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 145 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 146 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 147 | get·files·names | ||
| 148 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 149 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 150 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 151 | new·line | ||
| 152 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 153 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 147 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 148 | ··package_facts: | 164 | ··package_facts: |
| Offset 315, 36 lines modified | Offset 337, 14 lines modified | ||
| 315 | ··-·PCI-DSSv4-11.5.2 | 337 | ··-·PCI-DSSv4-11.5.2 |
| 316 | ··-·high_complexity | 338 | ··-·high_complexity |
| 317 | ··-·high_severity | 339 | ··-·high_severity |
| 318 | ··-·medium_disruption | 340 | ··-·medium_disruption |
| 319 | ··-·no_reboot_needed | 341 | ··-·no_reboot_needed |
| 320 | ··-·restrict_strategy | 342 | ··-·restrict_strategy |
| 321 | ··-·rpm_verify_hashes | 343 | ··-·rpm_verify_hashes |
| 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 323 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 324 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 325 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 326 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 327 | get·files·names | ||
| 328 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 329 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 330 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 331 | new·line | ||
| 332 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 333 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 334 | fi | ||
| 335 | else | ||
| 336 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 337 | fi | ||
| 338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 344 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 339 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, | 345 | The·RPM·package·management·system·can·check·file·access·permissions·of·installed·software·packages, |
| 340 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and | 346 | including·many·that·are·important·to·system·security.·Verify·that·the·file·permissions·of·system·files·and |
| 341 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: | 347 | commands·match·vendor·values.·Check·the·file·permissions·with·the·following·command: |
| 342 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' | 348 | $·sudo·rpm·-Va·|·awk·'{·if·(substr($0,2,1)=="M")·print·$NF·}' |
| 343 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, | 349 | Output·indicates·files·that·do·not·match·vendor·defaults.·After·locating·a·file·with·incorrect·permissions, |
| 344 | run·the·following·command·to·determine·which·package·owns·it: | 350 | run·the·following·command·to·determine·which·package·owns·it: |
| Offset 384, 14 lines modified | Offset 384, 53 lines modified | ||
| 384 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 384 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 385 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 385 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 386 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 386 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 387 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 387 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 388 | ····························SRG-OS-000278-GPOS-00108 | 388 | ····························SRG-OS-000278-GPOS-00108 |
| 389 | ·············_\x8c_\x8i_\x8s············6.1.1 | 389 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 390 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 390 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 396 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 397 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 398 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 399 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 400 | declare·-A·SETPERMS_RPM_DICT | ||
| 401 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 402 | #·is·expected·by·the·RPM·database | ||
| 403 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 404 | $NF·}') | ||
| 405 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 406 | do | ||
| 407 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 408 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 409 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 410 | ········do | ||
| 411 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 412 | duplicates. | ||
| 413 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 414 | ········done | ||
| 415 | done | ||
| 416 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 417 | #·correct·values | ||
| 418 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 419 | do | ||
| 420 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 421 | done | ||
| 422 | else | ||
| 423 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 424 | fi | ||
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 396 | -·name:·Gather·the·package·facts | 430 | -·name:·Gather·the·package·facts |
| 397 | ··package_facts: | 431 | ··package_facts: |
| Max diff block lines reached; 1244294/1250099 bytes (99.54%) of diff not shown. | |||
| Offset 15196, 415 lines modified | Offset 15196, 415 lines modified | ||
| 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b5b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b5c0:·2223·6964·6d36·3032·3022·2074·6162·696e··"#idm6020"·tabin | 0003b5c0:·2223·6964·6d36·3032·3022·2074·6162·696e··"#idm6020"·tabin | ||
| 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b5d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b5e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b5f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b600:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (401 lines added, 401 lines removed) | |
| 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b610:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b620:·3e52·656d·6564·6961·7469·6f6e·20 | 0003b620:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | ||
| 0003b630:·6 | 0003b630:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003b640:·3 | 0003b640:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b650:· | 0003b650:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b660:· | 0003b660:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b670:· | 0003b670:·6d36·3032·3022·3e3c·7072·653e·3c63·6f64··m6020"><pre><cod | ||
| 0003b680:· | 0003b680:·653e·2320·5265·6d65·6469·6174·696f·6e20··e>#·Remediation· | ||
| 0003b690:·6 | 0003b690:·6973·2061·7070·6c69·6361·626c·6520·6f6e··is·applicable·on | ||
| 0003b6a0:·6 | 0003b6a0:·6c79·2069·6e20·6365·7274·6169·6e20·706c··ly·in·certain·pl | ||
| 0003b6b0:· | 0003b6b0:·6174·666f·726d·730a·6966·2021·2028·207b··atforms.if·!·(·{ | ||
| 0003b6c0:· | 0003b6c0:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b6d0:· | 0003b6d0:·6b65·726e·656c·203b·7d20·2661·6d70·3b26··kernel·;}·&& | ||
| 0003b6e0:· | 0003b6e0:·616d·703b·207b·2072·706d·202d·2d71·7569··amp;·{·rpm·--qui | ||
| 0003b6f0:·7 | 0003b6f0:·6574·202d·7120·7270·6d2d·6f73·7472·6565··et·-q·rpm-ostree | ||
| 0003b700:· | 0003b700:·203b·7d20·2661·6d70·3b26·616d·703b·207b···;}·&&·{ | ||
| 0003b710:· | 0003b710:·2072·706d·202d·2d71·7569·6574·202d·7120···rpm·--quiet·-q· | ||
| 0003b720:· | 0003b720:·626f·6f74·6320·3b7d·2026·616d·703b·2661··bootc·;}·&&a | ||
| 0003b730:· | 0003b730:·6d70·3b20·7b20·2120·7270·6d20·2d2d·7175··mp;·{·!·rpm·--qu | ||
| 0003b740:· | 0003b740:·6965·7420·2d71·206f·7065·6e73·6869·6674··iet·-q·openshift | ||
| 0003b750:· | 0003b750:·2d6b·7562·656c·6574·203b·7d20·293b·2074··-kubelet·;}·);·t | ||
| 0003b760:· | 0003b760:·6865·6e0a·0a23·2046·696e·6420·7768·6963··hen..#·Find·whic | ||
| 0003b770:·6 | 0003b770:·6820·6669·6c65·7320·6861·7665·2069·6e63··h·files·have·inc | ||
| 0003b780:· | 0003b780:·6f72·7265·6374·2068·6173·6820·286e·6f74··orrect·hash·(not | ||
| 0003b790:· | 0003b790:·2069·6e20·2f65·7463·2c20·6265·6361·7573···in·/etc,·becaus | ||
| 0003b7a0:·6 | 0003b7a0:·6520·6f66·2074·6865·2073·7973·7465·6d20··e·of·the·system· | ||
| 0003b7b0:· | 0003b7b0:·7265·6c61·7465·6420·636f·6e66·6967·2066··related·config·f | ||
| 0003b7c0:·6 | 0003b7c0:·696c·6573·2920·616e·6420·7468·656e·2067··iles)·and·then·g | ||
| 0003b7d0:· | 0003b7d0:·6574·2066·696c·6573·206e·616d·6573·0a66··et·files·names.f | ||
| 0003b7e0:· | 0003b7e0:·696c·6573·5f77·6974·685f·696e·636f·7272··iles_with_incorr | ||
| 0003b7f0:· | 0003b7f0:·6563·745f·6861·7368·3d22·2428·7270·6d20··ect_hash="$(rpm· | ||
| 0003b800:·2 | 0003b800:·2d56·6120·2d2d·6e6f·636f·6e66·6967·207c··-Va·--noconfig·| | ||
| 0003b810:· | 0003b810:·2067·7265·7020·2d45·2027·5e2e·2e35·2720···grep·-E·'^..5'· | ||
| 0003b820:· | 0003b820:·7c20·6177·6b20·277b·7072·696e·7420·244e··|·awk·'{print·$N | ||
| 0003b830:·4 | 0003b830:·467d·2720·2922·0a0a·6966·205b·202d·6e20··F}'·)"..if·[·-n· | ||
| 0003b840:·2 | 0003b840:·2224·6669·6c65·735f·7769·7468·5f69·6e63··"$files_with_inc | ||
| 0003b850:· | 0003b850:·6f72·7265·6374·5f68·6173·6822·205d·3b20··orrect_hash"·];· | ||
| 0003b860:· | 0003b860:·7468·656e·0a20·2020·2023·2046·726f·6d20··then.····#·From· | ||
| 0003b870:· | 0003b870:·6669·6c65·7320·6e61·6d65·7320·6765·7420··files·names·get· | ||
| 0003b880:· | 0003b880:·7061·636b·6167·6520·6e61·6d65·7320·616e··package·names·an | ||
| 0003b890:· | 0003b890:·6420·6368·616e·6765·206e·6577·6c69·6e65··d·change·newline | ||
| 0003b8a0:· | 0003b8a0:·2074·6f20·7370·6163·652c·2062·6563·6175···to·space,·becau | ||
| 0003b8b0:· | 0003b8b0:·7365·2072·706d·2077·7269·7465·7320·6561··se·rpm·writes·ea | ||
| 0003b8c0:· | 0003b8c0:·6368·2070·6163·6b61·6765·2074·6f20·6e65··ch·package·to·ne | ||
| 0003b8d0:· | 0003b8d0:·7720·6c69·6e65·0a20·2020·2070·6163·6b61··w·line.····packa | ||
| 0003b8e0:· | 0003b8e0:·6765·735f·746f·5f72·6569·6e73·7461·6c6c··ges_to_reinstall | ||
| 0003b8f0:· | 0003b8f0:·3d22·2428·7270·6d20·2d71·6620·2466·696c··="$(rpm·-qf·$fil | ||
| 0003b900:· | 0003b900:·6573·5f77·6974·685f·696e·636f·7272·6563··es_with_incorrec | ||
| 0003b910:· | 0003b910:·745f·6861·7368·207c·2074·7220·275c·6e27··t_hash·|·tr·'\n' | ||
| 0003b920:· | 0003b920:·2027·2027·2922·0a0a·2020·2020·0a20·2020···'·')"..····.··· | ||
| 0003b930:· | 0003b930:·207a·7970·7065·7220·696e·7374·616c·6c20···zypper·install· | ||
| 0003b940:· | 0003b940:·2d66·202d·7920·2470·6163·6b61·6765·735f··-f·-y·$packages_ | ||
| 0003b950:· | 0003b950:·746f·5f72·6569·6e73·7461·6c6c·0a20·2020··to_reinstall.··· | ||
| 0003b960:· | 0003b960:·200a·6669·0a0a·656c·7365·0a20·2020·2026···.fi..else.····& | ||
| 0003b970:· | 0003b970:·6774·3b26·616d·703b·3220·6563·686f·2027··gt;&2·echo·' | ||
| 0003b980:· | 0003b980:·5265·6d65·6469·6174·696f·6e20·6973·206e··Remediation·is·n | ||
| 0003b990:·6 | 0003b990:·6f74·2061·7070·6c69·6361·626c·652c·206e··ot·applicable,·n | ||
| 0003b9a0:·6 | 0003b9a0:·6f74·6869·6e67·2077·6173·2064·6f6e·6527··othing·was·done' | ||
| 0003b9b0:· | 0003b9b0:·0a66·690a·3c2f·636f·6465·3e3c·2f70·7265··.fi.</code></pre | ||
| 0003b9c0:· | 0003b9c0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b9d0:· | 0003b9d0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b9e0:· | 0003b9e0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b9f0:·6 | 0003b9f0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003ba00:· | 0003ba00:·7267·6574·3d22·2369·646d·3630·3231·2220··rget="#idm6021"· | ||
| 0003ba10:· | 0003ba10:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003ba20:· | 0003ba20:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003ba30:· | 0003ba30:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003ba40:· | 0003ba40:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003ba50:· | 0003ba50:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003ba60:· | 0003ba60:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003ba70:·6 | 0003ba70:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003ba80:·7 | 0003ba80:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003ba90:·62 | 0003ba90:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003baa0:· | 0003baa0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003bab0:·22 | 0003bab0:·2220·6964·3d22·6964·6d36·3032·3122·3e3c··"·id="idm6021">< | ||
| 0003bac0:· | 0003bac0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003bad0:· | 0003bad0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003bae0:· | 0003bae0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003baf0:· | 0003baf0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003bb00:· | 0003bb00:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003bb10:· | 0003bb10:·6974·793a·3c2f·7468·3e3c·7464·3e68·6967··ity:</th><td>hig | ||
| 0003bb20:· | 0003bb20:·683c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··h</td></tr><tr>< | ||
| 0003bb30:· | 0003bb30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bb40:· | 0003bb40:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 0003bb50:· | 0003bb50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003bb60:· | 0003bb60:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bb70:· | 0003bb70:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003bb80:· | 0003bb80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003bb90:· | 0003bb90:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 0003bba0:· | 0003bba0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003bbb0:· | 0003bbb0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003bbc0:· | 0003bbc0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | ||
| 0003bbd0:· | 0003bbd0:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | ||
| 0003bbe0:· | 0003bbe0:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | ||
| 0003bbf0:· | 0003bbf0:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | ||
| 0003bc00:· | 0003bc00:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | ||
| 0003bc10:· | 0003bc10:·2d38·3537·3838·2d38·0a20·202d·2043·4a49··-85788-8.··-·CJI | ||
| 0003bc20:· | 0003bc20:·532d·352e·3130·2e34·2e31·0a20·202d·204e··S-5.10.4.1.··-·N | ||
| 0003bc30:· | 0003bc30:·4953·542d·3830·302d·3137·312d·332e·332e··IST-800-171-3.3. | ||
| 0003bc40:· | 0003bc40:·380a·2020·2d20·4e49·5354·2d38·3030·2d31··8.··-·NIST-800-1 | ||
| 0003bc50:· | 0003bc50:·3731·2d33·2e34·2e31·0a20·202d·204e·4953··71-3.4.1.··-·NIS | ||
| 0003bc60:· | 0003bc60:·542d·3830·302d·3533·2d41·552d·3928·3329··T-800-53-AU-9(3) | ||
| 0003bc70:· | 0003bc70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bc80:· | 0003bc80:·2d43·4d2d·3628·6329·0a20·202d·204e·4953··-CM-6(c).··-·NIS | ||
| 0003bc90:· | 0003bc90:·542d·3830·302d·3533·2d43·4d2d·3628·6429··T-800-53-CM-6(d) | ||
| 0003bca0:· | 0003bca0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003bcb0:· | 0003bcb0:·2d53·492d·370a·2020·2d20·4e49·5354·2d38··-SI-7.··-·NIST-8 | ||
| 0003bcc0:· | 0003bcc0:·3030·2d35·332d·5349·2d37·2831·290a·2020··00-53-SI-7(1).·· | ||
| 0003bcd0:· | 0003bcd0:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | ||
| 0003bce0:·2 | 0003bce0:·2d37·2836·290a·2020·2d20·5043·492d·4453··-7(6).··-·PCI-DS | ||
| 0003bcf0:· | 0003bcf0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | ||
| 0003bd00:· | 0003bd00:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | ||
| 0003bd10:· | 0003bd10:·2020·2d20·6869·6768·5f63·6f6d·706c·6578····-·high_complex | ||
| 0003bd20:· | 0003bd20:·6974·790a·2020·2d20·6869·6768·5f73·6576··ity.··-·high_sev | ||
| 0003bd30:·6 | 0003bd30:·6572·6974·790a·2020·2d20·6d65·6469·756d··erity.··-·medium | ||
| 0003bd40:· | 0003bd40:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003bd50:·6e | 0003bd50:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 0003bd60:· | 0003bd60:·0a20·202d·2072·6573·7472·6963·745f·7374··.··-·restrict_st | ||
| 0003bd70:· | 0003bd70:·7261·7465·6779·0a20·202d·2072·706d·5f76··rategy.··-·rpm_v | ||
| 0003bd80:·6 | 0003bd80:·6572·6966·795f·6861·7368·6573·0a0a·2d20··erify_hashes..-· | ||
| Max diff block lines reached; 14833157/14889075 bytes (99.62%) of diff not shown. | |||
| Offset 130, 14 lines modified | Offset 130, 36 lines modified | ||
| 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, | 130 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2, |
| 131 | ····························A.14.2.3,·A.14.2.4 | 131 | ····························A.14.2.3,·A.14.2.4 |
| 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) | 132 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3) |
| 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 | 133 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.DS-6,·PR.DS-8,·PR.IP-1 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 135 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 139 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 140 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 141 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 142 | get·files·names | ||
| 143 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 144 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 145 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 146 | new·line | ||
| 147 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 148 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 149 | fi | ||
| 150 | else | ||
| 151 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 152 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 142 | -·name:·Gather·the·package·facts | 158 | -·name:·Gather·the·package·facts |
| 143 | ··package_facts: | 159 | ··package_facts: |
| Offset 310, 36 lines modified | Offset 332, 14 lines modified | ||
| 310 | ··-·PCI-DSSv4-11.5.2 | 332 | ··-·PCI-DSSv4-11.5.2 |
| 311 | ··-·high_complexity | 333 | ··-·high_complexity |
| 312 | ··-·high_severity | 334 | ··-·high_severity |
| 313 | ··-·medium_disruption | 335 | ··-·medium_disruption |
| 314 | ··-·no_reboot_needed | 336 | ··-·no_reboot_needed |
| 315 | ··-·restrict_strategy | 337 | ··-·restrict_strategy |
| 316 | ··-·rpm_verify_hashes | 338 | ··-·rpm_verify_hashes |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 318 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 319 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 320 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 321 | #·Find·which·files·have·incorrect·hash·(not·in·/etc,·because·of·the·system·related·config·files)·and·then | ||
| 322 | get·files·names | ||
| 323 | files_with_incorrect_hash="$(rpm·-Va·--noconfig·|·grep·-E·'^..5'·|·awk·'{print·$NF}'·)" | ||
| 324 | if·[·-n·"$files_with_incorrect_hash"·];·then | ||
| 325 | ····#·From·files·names·get·package·names·and·change·newline·to·space,·because·rpm·writes·each·package·to | ||
| 326 | new·line | ||
| 327 | ····packages_to_reinstall="$(rpm·-qf·$files_with_incorrect_hash·|·tr·'\n'·'·')" | ||
| 328 | ····zypper·install·-f·-y·$packages_to_reinstall | ||
| 329 | fi | ||
| 330 | else | ||
| 331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 332 | fi | ||
| 333 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·a\x8an\x8nd\x8d·C\x8Co\x8or\x8rr\x8re\x8ec\x8ct\x8t·O\x8Ow\x8wn\x8ne\x8er\x8rs\x8sh\x8hi\x8ip\x8p·w\x8wi\x8it\x8th\x8h·R\x8RP\x8PM\x8M·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 334 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, | 340 | The·RPM·package·management·system·can·check·file·ownership·permissions·of·installed·software·packages, |
| 335 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, | 341 | including·many·that·are·important·to·system·security.·After·locating·a·file·with·incorrect·permissions, |
| 336 | which·can·be·found·with: | 342 | which·can·be·found·with: |
| 337 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' | 343 | rpm·-Va·|·awk·'{·if·(substr($0,6,1)=="U"·||·substr($0,7,1)=="G")·print·$NF·}' |
| 338 | run·the·following·command·to·determine·which·package·owns·it: | 344 | run·the·following·command·to·determine·which·package·owns·it: |
| 339 | $·rpm·-qf·FILENAME | 345 | $·rpm·-qf·FILENAME |
| Offset 421, 14 lines modified | Offset 421, 53 lines modified | ||
| 421 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) | 421 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(d),·CM-6(c),·SI-7,·SI-7(1),·SI-7(6),·AU-9(3),·CM-6(a) |
| 422 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 | 422 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-4,·PR.DS-5,·PR.IP-1,·PR.PT-1 |
| 423 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 423 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, | 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000256-GPOS-00097,·SRG-OS-000257-GPOS-00098,·SRG-OS-000258-GPOS-00099, |
| 425 | ····························SRG-OS-000278-GPOS-00108 | 425 | ····························SRG-OS-000278-GPOS-00108 |
| 426 | ·············_\x8c_\x8i_\x8s············6.1.1 | 426 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 427 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | ||
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | ||
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 433 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 434 | if·!·(·{·rpm·--quiet·-q·kernel·;}·&&·{·rpm·--quiet·-q·rpm-ostree·;}·&&·{·rpm·--quiet·-q·bootc·;}·&&·{·!·rpm | ||
| 435 | --quiet·-q·openshift-kubelet·;}·);·then | ||
| 436 | #·Declare·array·to·hold·set·of·RPM·packages·we·need·to·correct·permissions·for | ||
| 437 | declare·-A·SETPERMS_RPM_DICT | ||
| 438 | #·Create·a·list·of·files·on·the·system·having·permissions·different·from·what | ||
| 439 | #·is·expected·by·the·RPM·database | ||
| 440 | readarray·-t·FILES_WITH_INCORRECT_PERMS·<·<(rpm·-Va·--nofiledigest·|·awk·'{·if·(substr($0,2,1)=="M")·print | ||
| 441 | $NF·}') | ||
| 442 | for·FILE_PATH·in·"${FILES_WITH_INCORRECT_PERMS[@]}" | ||
| 443 | do | ||
| 444 | ········#·NOTE:·some·files·maybe·controlled·by·more·then·one·package | ||
| 445 | ········readarray·-t·RPM_PACKAGES·<·<(rpm·-qf·"${FILE_PATH}") | ||
| 446 | ········for·RPM_PACKAGE·in·"${RPM_PACKAGES[@]}" | ||
| 447 | ········do | ||
| 448 | ················#·Use·an·associative·array·to·store·packages·as·it's·keys,·not·having·to·care·about | ||
| 449 | duplicates. | ||
| 450 | ················SETPERMS_RPM_DICT["$RPM_PACKAGE"]=1 | ||
| 451 | ········done | ||
| 452 | done | ||
| 453 | #·For·each·of·the·RPM·packages·left·in·the·list·--·reset·its·permissions·to·the | ||
| 454 | #·correct·values | ||
| 455 | for·RPM_PACKAGE·in·"${!SETPERMS_RPM_DICT[@]}" | ||
| 456 | do | ||
| 457 | » rpm·--restore·"${RPM_PACKAGE}" | ||
| 458 | done | ||
| 459 | else | ||
| 460 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 461 | fi | ||
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 433 | -·name:·Gather·the·package·facts | 467 | -·name:·Gather·the·package·facts |
| 434 | ··package_facts: | 468 | ··package_facts: |
| Max diff block lines reached; 1421894/1427547 bytes (99.60%) of diff not shown. | |||
| Offset 15096, 184 lines modified | Offset 15096, 184 lines modified | ||
| 0003af70:·6172·6765·743d·2223·6964·6d36·3336·3122··arget="#idm6361" | 0003af70:·6172·6765·743d·2223·6964·6d36·3336·3122··arget="#idm6361" | ||
| 0003af80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003af80:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003af90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003af90:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003afa0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003afa0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003afb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003afb0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003afc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003afc0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003afd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003afd0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003afe0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003aff0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b000:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b010:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003afe0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aff0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b000:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b010:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b020:·6522·2069·643d·2269·646d·3633·3631·223e··e"·id="idm6361"> | |||
| 0003b030:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b040:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b050:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b060:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b070:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b080:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b090:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0a0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b0b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b0c0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b0d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b0e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b0f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b100:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b110:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b120:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b130:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0003b140:·6765·2066·6163·7473·0a20·2070·6163·6b61··ge·facts.··packa | |||
| 0003b150:·6765·5f66·6163·7473·3a0a·2020·2020·6d61··ge_facts:.····ma | |||
| 0003b160:·6e61·6765·723a·2061·7574·6f0a·2020·7461··nager:·auto.··ta | |||
| 0003b170:·6773·3a0a·2020·2d20·4343·452d·3833·3238··gs:.··-·CCE-8328 | |||
| 0003b180:·392d·390a·2020·2d20·434a·4953·2d35·2e31··9-9.··-·CJIS-5.1 | |||
| 0003b190:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b1a0:·5449·472d·534c·4553·2d31·352d·3031·3034··TIG-SLES-15-0104 | |||
| 0003b1b0:·3139·0a20·202d·204e·4953·542d·3830·302d··19.··-·NIST-800- | |||
| 0003b1c0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b1d0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b1e0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b1f0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b200:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b210:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b220:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b230:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b240:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b250:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b260:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b270:·6564·0a0a·2d20·6e61·6d65·3a20·456e·7375··ed..-·name:·Ensu | |||
| 0003b280:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b290:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b2a0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b2b0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b2c0:·740a·2020·7768·656e·3a20·2722·6b65·726e··t.··when:·'"kern | |||
| 0003b2d0:·656c·2d64·6566·6175·6c74·2220·696e·2061··el-default"·in·a | |||
| 0003b2e0:·6e73·6962·6c65·5f66·6163·7473·2e70·6163··nsible_facts.pac | |||
| 0003b2f0:·6b61·6765·7327·0a20·2074·6167·733a·0a20··kages'.··tags:.· | |||
| 0003b300:·202d·2043·4345·2d38·3332·3839·2d39·0a20···-·CCE-83289-9.· | |||
| 0003b310:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b320:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b330:·4c45·532d·3135·2d30·3130·3431·390a·2020··LES-15-010419.·· | |||
| 0003b340:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b350:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b360:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b370:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b380:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b390:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b3a0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b3b0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b3c0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b3d0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b3e0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b3f0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b400:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b410:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b420:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b430:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b440:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b450:·2369·646d·3633·3632·2220·7461·6269·6e64··#idm6362"·tabind | |||
| 0003b460:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b470:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b480:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b490:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b4a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b4b0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003b4c0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003b4d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b500:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b510:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 0003b520:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b530:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b540:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b550:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b560:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b570:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b | 0003b020:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003b590:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b5a0:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | |||
| 0003b5b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b5c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b5d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b5e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b5f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b600:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b610:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b620:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b630:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b640:·6522·2069·643d·2269·646d·3633·3633·223e··e"·id="idm6363"> | |||
| 0003b650:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b660:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b670:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b680:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b690:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b6a0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b6b0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003b030:·2269·646d·3633·3631·223e·3c70·7265·3e3c··"idm6361"><pre>< | ||
| 0003b040:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b050:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b060:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b070:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b080:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| Max diff block lines reached; 22765895/22789935 bytes (99.89%) of diff not shown. | |||
| Offset 113, 14 lines modified | Offset 113, 44 lines modified | ||
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 116 | ·············_\x8c_\x8i_\x8s············1.4.1 | 116 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r958794_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | include·install_aide | ||
| 130 | class·install_aide·{ | ||
| 131 | ··package·{·'aide': | ||
| 132 | ····ensure·=>·'installed', | ||
| 133 | ··} | ||
| 134 | } | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 141 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 142 | zypper·install·-y·"aide" | ||
| 143 | else | ||
| 144 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 145 | fi | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Gather·the·package·facts | 151 | -·name:·Gather·the·package·facts |
| 126 | ··package_facts: | 152 | ··package_facts: |
| Offset 153, 44 lines modified | Offset 183, 14 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 183 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 184 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 185 | ··-·low_complexity |
| 156 | ··-·low_disruption | 186 | ··-·low_disruption |
| 157 | ··-·medium_severity | 187 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 188 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 189 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 170 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 171 | zypper·install·-y·"aide" | ||
| 172 | else | ||
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 174 | fi | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | include·install_aide | ||
| 181 | class·install_aide·{ | ||
| 182 | ··package·{·'aide': | ||
| 183 | ····ensure·=>·'installed', | ||
| 184 | ··} | ||
| 185 | } | ||
| 186 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 187 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 191 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 188 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward | 192 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward |
| 189 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., | 193 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., |
| 190 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information | 194 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information |
| 191 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source | 195 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source |
| 192 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and | 196 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and |
| Offset 204, 14 lines modified | Offset 204, 82 lines modified | ||
| 204 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 204 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 205 | Identifiers:·CCE-85610-4 | 205 | Identifiers:·CCE-85610-4 |
| 206 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 | 206 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 |
| 207 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 207 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 208 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 208 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 209 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 209 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 210 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule | 210 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule |
| 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 216 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 217 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 218 | zypper·install·-y·"aide" | ||
| 219 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 220 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 221 | aide.conf | ||
| 222 | else | ||
| 223 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 224 | fi | ||
| 225 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 226 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 227 | else | ||
| 228 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| Max diff block lines reached; 1746518/1752880 bytes (99.64%) of diff not shown. | |||
| Offset 15010, 361 lines modified | Offset 15010, 361 lines modified | ||
| 0003aa10:·6172·6765·743d·2223·6964·6d36·3437·3422··arget="#idm6474" | 0003aa10:·6172·6765·743d·2223·6964·6d36·3437·3422··arget="#idm6474" | ||
| 0003aa20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003aa20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003aa30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003aa30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003aa40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003aa40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003aa50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003aa50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003aa60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003aa60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003aa70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003aa70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003aa80:·6f6e·2053·6865·6c6c·2073·6372·6970·7420··on·Shell·script· | |||
| 0003aa90:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aaa0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003aa80:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003aa90:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003aaa0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003aab0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003aac0:·6522·2069·643d·2269·646d·3634·3734·223e··e"·id="idm6474"> | |||
| 0003aad0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003aae0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003aaf0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ab00:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ab10:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ab20:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003ab30:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ab40:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003ab50:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ab60:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003ab70:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ab80:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ab90:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003aba0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 0003abb0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003abc0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003abd0:·3a20·4761·7468·6572·2074·6865·2070·6163··:·Gather·the·pac | |||
| 0003abe0:·6b61·6765·2066·6163·7473·0a20·2070·6163··kage·facts.··pac | |||
| 0003abf0:·6b61·6765·5f66·6163·7473·3a0a·2020·2020··kage_facts:.···· | |||
| 0003ac00:·6d61·6e61·6765·723a·2061·7574·6f0a·2020··manager:·auto.·· | |||
| 0003ac10:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | |||
| 0003ac20:·3631·302d·340a·2020·2d20·4449·5341·2d53··610-4.··-·DISA-S | |||
| 0003ac30:·5449·472d·534c·4553·2d31·352d·3033·3036··TIG-SLES-15-0306 | |||
| 0003ac40:·3330·0a20·202d·204e·4953·542d·3830·302d··30.··-·NIST-800- | |||
| 0003ac50:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003ac60:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003ac70:·3329·2e31·0a20·202d·2061·6964·655f·6368··3).1.··-·aide_ch | |||
| 0003ac80:·6563·6b5f·6175·6469·745f·746f·6f6c·730a··eck_audit_tools. | |||
| 0003ac90:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003aca0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003acb0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003acc0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003acd0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003ace0:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003acf0:·7465·6779·0a0a·2d20·6e61·6d65·3a20·436f··tegy..-·name:·Co | |||
| 0003ad00:·6e66·6967·7572·6520·4149·4445·2074·6f20··nfigure·AIDE·to· | |||
| 0003ad10:·5665·7269·6679·2074·6865·2041·7564·6974··Verify·the·Audit | |||
| 0003ad20:·2054·6f6f·6c73·202d·2047·6174·6865·7220···Tools·-·Gather· | |||
| 0003ad30:·4c69·7374·206f·6620·5061·636b·6167·6573··List·of·Packages | |||
| 0003ad40:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003ad50:·2d38·3536·3130·2d34·0a20·202d·2044·4953··-85610-4.··-·DIS | |||
| 0003ad60:·412d·5354·4947·2d53·4c45·532d·3135·2d30··A-STIG-SLES-15-0 | |||
| 0003ad70:·3330·3633·300a·2020·2d20·4e49·5354·2d38··30630.··-·NIST-8 | |||
| 0003ad80:·3030·2d35·332d·4155·2d39·2833·290a·2020··00-53-AU-9(3).·· | |||
| 0003ad90:·2d20·4e49·5354·2d38·3030·2d35·332d·4155··-·NIST-800-53-AU | |||
| 0003ada0:·2d39·2833·292e·310a·2020·2d20·6169·6465··-9(3).1.··-·aide | |||
| 0003adb0:·5f63·6865·636b·5f61·7564·6974·5f74·6f6f··_check_audit_too | |||
| 0003adc0:·6c73·0a20·202d·2061·6964·655f·6368·6563··ls.··-·aide_chec | |||
| 0003add0:·6b5f·6175·6469·745f·746f·6f6c·730a·2020··k_audit_tools.·· | |||
| 0003ade0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003adf0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003ae00:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003ae10:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003ae20:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003ae30:·2072·6573·7472·6963·745f·7374·7261·7465···restrict_strate | |||
| 0003ae40:·6779·0a20·2061·6e73·6962·6c65·2e62·7569··gy.··ansible.bui | |||
| 0003ae50:·6c74·696e·2e70·6163·6b61·6765·5f66·6163··ltin.package_fac | |||
| 0003ae60:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003ae70:·2061·7574·6f0a·2020·7768·656e·3a20·2722···auto.··when:·'" | |||
| 0003ae80:·6b65·726e·656c·2d64·6566·6175·6c74·2220··kernel-default"· | |||
| 0003ae90:·696e·2061·6e73·6962·6c65·5f66·6163·7473··in·ansible_facts | |||
| 0003aea0:·2e70·6163·6b61·6765·7327·0a0a·2d20·6e61··.packages'..-·na | |||
| 0003aeb0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003aec0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003aed0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003aee0:·3a20·277b·7b20·6974·656d·207d·7d27·0a20··:·'{{·item·}}'.· | |||
| 0003aef0:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003af00:·740a·2020·7769·7468·5f69·7465·6d73·3a0a··t.··with_items:. | |||
| 0003af10:·2020·2d20·6169·6465·0a20·2077·6865·6e3a····-·aide.··when: | |||
| 0003af20:·2027·226b·6572·6e65·6c2d·6465·6661·756c···'"kernel-defaul | |||
| 0003af30:·7422·2069·6e20·616e·7369·626c·655f·6661··t"·in·ansible_fa | |||
| 0003af40:·6374·732e·7061·636b·6167·6573·270a·2020··cts.packages'.·· | |||
| 0003af50:·7461·6773·3a0a·2020·2d20·4343·452d·3835··tags:.··-·CCE-85 | |||
| 0003af60:·3631·302d·340a·2020·2d20·4449·5341·2d53··610-4.··-·DISA-S | |||
| 0003af70:·5449·472d·534c·4553·2d31·352d·3033·3036··TIG-SLES-15-0306 | |||
| 0003af80:·3330·0a20·202d·204e·4953·542d·3830·302d··30.··-·NIST-800- | |||
| 0003af90:·3533·2d41·552d·3928·3329·0a20·202d·204e··53-AU-9(3).··-·N | |||
| 0003afa0:·4953·542d·3830·302d·3533·2d41·552d·3928··IST-800-53-AU-9( | |||
| 0003afb0:·3329·2e31·0a20·202d·2061·6964·655f·6368··3).1.··-·aide_ch | |||
| 0003afc0:·6563·6b5f·6175·6469·745f·746f·6f6c·730a··eck_audit_tools. | |||
| 0003afd0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003afe0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003aff0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b000:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b010:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b020:·202d·2072·6573·7472·6963·745f·7374·7261···-·restrict_stra | |||
| 0003b030:·7465·6779·0a0a·2d20·6e61·6d65·3a20·5365··tegy..-·name:·Se | |||
| 0003b040:·7420·6175·6469·745f·746f·6f6c·7320·6661··t·audit_tools·fa | |||
| 0003b050:·6374·0a20·2073·6574·5f66·6163·743a·0a20··ct.··set_fact:.· | |||
| 0003b060:·2020·2061·7564·6974·5f74·6f6f·6c73·3a0a·····audit_tools:. | |||
| 0003b070:·2020·2020·2d20·2f75·7372·2f73·6269·6e2f······-·/usr/sbin/ | |||
| 0003b080:·6175·6469·7370·640a·2020·2020·2d20·2f75··audispd.····-·/u | |||
| 0003b090:·7372·2f73·6269·6e2f·6175·6469·7463·746c··sr/sbin/auditctl | |||
| 0003b0a0:·0a20·2020·202d·202f·7573·722f·7362·696e··.····-·/usr/sbin | |||
| 0003b0b0:·2f61·7564·6974·640a·2020·2020·2d20·2f75··/auditd.····-·/u | |||
| 0003b0c0:·7372·2f73·6269·6e2f·6175·6765·6e72·756c··sr/sbin/augenrul | |||
| 0003b0d0:·6573·0a20·2020·202d·202f·7573·722f·7362··es.····-·/usr/sb | |||
| 0003b0e0:·696e·2f61·7572·6570·6f72·740a·2020·2020··in/aureport.···· | |||
| 0003b0f0:·2d20·2f75·7372·2f73·6269·6e2f·6175·7365··-·/usr/sbin/ause | |||
| 0003b100:·6172·6368·0a20·2020·202d·202f·7573·722f··arch.····-·/usr/ | |||
| 0003b110:·7362·696e·2f61·7574·7261·6365·0a20·2077··sbin/autrace.··w | |||
| 0003b120:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003b130:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b140:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b150:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b160:·452d·3835·3631·302d·340a·2020·2d20·4449··E-85610-4.··-·DI | |||
| 0003b170:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b180:·3033·3036·3330·0a20·202d·204e·4953·542d··030630.··-·NIST- | |||
| 0003b190:·3830·302d·3533·2d41·552d·3928·3329·0a20··800-53-AU-9(3).· | |||
| 0003b1a0:·202d·204e·4953·542d·3830·302d·3533·2d41···-·NIST-800-53-A | |||
| 0003b1b0:·552d·3928·3329·2e31·0a20·202d·2061·6964··U-9(3).1.··-·aid | |||
| 0003b1c0:·655f·6368·6563·6b5f·6175·6469·745f·746f··e_check_audit_to | |||
| Max diff block lines reached; 20975476/21023942 bytes (99.77%) of diff not shown. | |||
| Offset 101, 14 lines modified | Offset 101, 82 lines modified | ||
| 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 101 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 102 | Identifiers:·CCE-85610-4 | 102 | Identifiers:·CCE-85610-4 |
| 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 | 103 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001496,·CCI-001494,·CCI-001495,·CCI-001493 |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 | 104 | ·············_\x8n_\x8i_\x8s_\x8t····AU-9(3),·AU-9(3).1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000278-GPOS-00108 |
| 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 | 106 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-030630 |
| 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule | 107 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234962r991567_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 113 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 114 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 115 | zypper·install·-y·"aide" | ||
| 116 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 117 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 118 | aide.conf | ||
| 119 | else | ||
| 120 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 121 | fi | ||
| 122 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 123 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 124 | else | ||
| 125 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 126 | fi | ||
| 127 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 128 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 129 | aide.conf | ||
| 130 | else | ||
| 131 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 132 | fi | ||
| 133 | if·grep·-i·'^.*/usr/sbin/aureport.*$'·/etc/aide.conf;·then | ||
| 134 | sed·-i·"s#.*/usr/sbin/aureport.*#/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 135 | aide.conf | ||
| 136 | else | ||
| 137 | echo·"/usr/sbin/aureport·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 138 | fi | ||
| 139 | if·grep·-i·'^.*/usr/sbin/autrace.*$'·/etc/aide.conf;·then | ||
| 140 | sed·-i·"s#.*/usr/sbin/autrace.*#/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 141 | else | ||
| 142 | echo·"/usr/sbin/autrace·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 143 | fi | ||
| 144 | if·grep·-i·'^.*/usr/sbin/augenrules.*$'·/etc/aide.conf;·then | ||
| 145 | sed·-i·"s#.*/usr/sbin/augenrules.*#/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 146 | aide.conf | ||
| 147 | else | ||
| 148 | echo·"/usr/sbin/augenrules·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 149 | fi | ||
| 150 | if·grep·-i·'^.*/usr/sbin/audispd.*$'·/etc/aide.conf;·then | ||
| 151 | sed·-i·"s#.*/usr/sbin/audispd.*#/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 152 | else | ||
| 153 | echo·"/usr/sbin/audispd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 154 | fi | ||
| 155 | else | ||
| 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 157 | fi | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 113 | -·name:·Gather·the·package·facts | 163 | -·name:·Gather·the·package·facts |
| 114 | ··package_facts: | 164 | ··package_facts: |
| Offset 216, 82 lines modified | Offset 284, 14 lines modified | ||
| 216 | ··-·NIST-800-53-AU-9(3).1 | 284 | ··-·NIST-800-53-AU-9(3).1 |
| 217 | ··-·aide_check_audit_tools | 285 | ··-·aide_check_audit_tools |
| 218 | ··-·low_complexity | 286 | ··-·low_complexity |
| 219 | ··-·low_disruption | 287 | ··-·low_disruption |
| 220 | ··-·medium_severity | 288 | ··-·medium_severity |
| 221 | ··-·no_reboot_needed | 289 | ··-·no_reboot_needed |
| 222 | ··-·restrict_strategy | 290 | ··-·restrict_strategy |
| 223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | if·grep·-i·'^.*/usr/sbin/auditctl.*$'·/etc/aide.conf;·then | ||
| 232 | sed·-i·"s#.*/usr/sbin/auditctl.*#/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 233 | aide.conf | ||
| 234 | else | ||
| 235 | echo·"/usr/sbin/auditctl·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 236 | fi | ||
| 237 | if·grep·-i·'^.*/usr/sbin/auditd.*$'·/etc/aide.conf;·then | ||
| 238 | sed·-i·"s#.*/usr/sbin/auditd.*#/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/aide.conf | ||
| 239 | else | ||
| 240 | echo·"/usr/sbin/auditd·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| 241 | fi | ||
| 242 | if·grep·-i·'^.*/usr/sbin/ausearch.*$'·/etc/aide.conf;·then | ||
| 243 | sed·-i·"s#.*/usr/sbin/ausearch.*#/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512#"·/etc/ | ||
| 244 | aide.conf | ||
| 245 | else | ||
| 246 | echo·"/usr/sbin/ausearch·p+i+n+u+g+s+b+acl+selinux+xattrs+sha512"·>>·/etc/aide.conf | ||
| Max diff block lines reached; 1483025/1488731 bytes (99.62%) of diff not shown. | |||
| Offset 16817, 96 lines modified | Offset 16817, 96 lines modified | ||
| 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | 00041b00:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | ||
| 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 00041b10:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00041b20:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00041b30:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00041b40:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00041b50:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00041b60:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00041b70:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 00041b80:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00041b90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041ba0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041bb0:·6522·2069·643d·2269·646d·3933·3839·223e··e"·id="idm9389"> | |||
| 00041bc0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041bd0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041b70:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00041b80:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00041b90:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00041ba0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041bb0:·6170·7365·2220·6964·3d22·6964·6d39·3338··apse"·id="idm938 | |||
| 00041bc0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 00041bd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00041be0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041b | 00041be0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00041bf0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00041c00:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00041c00:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00041c10:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041c20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041c30:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041c40:·3a3c·2f74·683e·3c74·643e·6869·6768·3c2f··:</th><td>high</ | |||
| 00041c50:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041c | 00041c10:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00041c70:·7472·7565·3c2f·7464·3e3c·2f74·723e·3c74··true</td></tr><t | |||
| 00041c80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00041c90:·2f74·683e·3c74·643e·7061·7463·683c·2f74··/th><td>patch</t | |||
| 00041ca0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041cb0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00041cc0:·3a20·5365·6375·7269·7479·2070·6174·6368··:·Security·patch | |||
| 00041cd0:·6573·2061·7265·2075·7020·746f·2064·6174··es·are·up·to·dat | |||
| 00041ce0:·650a·2020·7061·636b·6167·653a·0a20·2020··e.··package:.··· | |||
| 00041cf0:·206e·616d·653a·2027·2a27·0a20·2020·2073···name:·'*'.····s | |||
| 00041d00:·7461·7465·3a20·6c61·7465·7374·0a20·2074··tate:·latest.··t | |||
| 00041d10:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 00041d20:·3631·2d38·0a20·202d·2043·4a49·532d·352e··61-8.··-·CJIS-5. | |||
| 00041d30:·3130·2e34·2e31·0a20·202d·2044·4953·412d··10.4.1.··-·DISA- | |||
| 00041d40:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 00041d50:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 00041d60:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00041d70:·4e49·5354·2d38·3030·2d35·332d·5349·2d32··NIST-800-53-SI-2 | |||
| 00041d80:·2835·290a·2020·2d20·4e49·5354·2d38·3030··(5).··-·NIST-800 | |||
| 00041d90:·2d35·332d·5349·2d32·2863·290a·2020·2d20··-53-SI-2(c).··-· | |||
| 00041da0:·5043·492d·4453·532d·5265·712d·362e·320a··PCI-DSS-Req-6.2. | |||
| 00041db0:·2020·2d20·5043·492d·4453·5376·342d·362e····-·PCI-DSSv4-6. | |||
| 00041dc0:·330a·2020·2d20·5043·492d·4453·5376·342d··3.··-·PCI-DSSv4- | |||
| 00041dd0:·362e·332e·330a·2020·2d20·6869·6768·5f64··6.3.3.··-·high_d | |||
| 00041de0:·6973·7275·7074·696f·6e0a·2020·2d20·6c6f··isruption.··-·lo | |||
| 00041df0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00041e00:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00041e10:·0a20·202d·2070·6174·6368·5f73·7472·6174··.··-·patch_strat | |||
| 00041e20:·6567·790a·2020·2d20·7265·626f·6f74·5f72··egy.··-·reboot_r | |||
| 00041e30:·6571·7569·7265·640a·2020·2d20·7365·6375··equired.··-·secu | |||
| 00041e40:·7269·7479·5f70·6174·6368·6573·5f75·705f··rity_patches_up_ | |||
| 00041e50:·746f·5f64·6174·650a·2020·2d20·736b·6970··to_date.··-·skip | |||
| 00041e60:·5f61·6e73·6962·6c65·5f6c·696e·740a·3c2f··_ansible_lint.</ | |||
| 00041e70:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041e80:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041e90:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041ea0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041eb0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00041ec0:·2369·646d·3933·3930·2220·7461·6269·6e64··#idm9390"·tabind | |||
| 00041ed0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041ee0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041ef0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041f00:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041f10:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00041f20:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 00041f30:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | |||
| 00041f40:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041f50:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041f60:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041f70:·3933·3930·223e·3c74·6162·6c65·2063·6c61··9390"><table·cla | |||
| 00041f80:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041f90:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041fa0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041fb0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041fc0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00041fd0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041fe0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00041ff0:·696f·6e3a·3c2f·7468·3e3c·7464·3e68·6967··ion:</th><td>hig | |||
| 0004 | 00041c20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00042010:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042020:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | |||
| 00042030:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00042040:·793a·3c2f·7468·3e3c·7464·3e70·6174·6368··y:</th><td>patch | |||
| 00042050:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00042060:·653e·3c70·7265·3e3c·636f·6465·3e0a·0a7a··e><pre><code>..z | |||
| 00042070:·7970·7065·7220·7061·7463·6820·2d67·2073··ypper·patch·-g·s | |||
| 0004 | 00041c30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00041c40:·7468·3e3c·7464·3e68·6967·683c·2f74·643e··th><td>high</td> | |||
| 00041c50:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00041c60:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 00041c70:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00041c80:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00041c90:·3e3c·7464·3e70·6174·6368·3c2f·7464·3e3c··><td>patch</td>< | |||
| 00041ca0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00041cb0:·3e3c·636f·6465·3e0a·0a7a·7970·7065·7220··><code>..zypper· | |||
| 00041cc0:·7061·7463·6820·2d67·2073·6563·7572·6974··patch·-g·securit | |||
| 00041cd0:·7920·2d79·0a3c·2f63·6f64·653e·3c2f·7072··y·-y.</code></pr | |||
| 00041ce0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00041cf0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00041d00:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00041d10:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00041d20:·6172·6765·743d·2223·6964·6d39·3339·3022··arget="#idm9390" | |||
| 00041d30:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00041d40:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00041d50:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00041d60:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00041d70:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00041d80:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00041d90:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00041da0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00041db0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041dc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041dd0:·6522·2069·643d·2269·646d·3933·3930·223e··e"·id="idm9390"> | |||
| 00041de0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041df0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041e00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| Max diff block lines reached; 9365462/9377356 bytes (99.87%) of diff not shown. | |||
| Offset 276, 14 lines modified | Offset 276, 22 lines modified | ||
| 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 | 276 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-6.2 |
| 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 277 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 | 278 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010010 |
| 279 | ·············_\x8c_\x8i_\x8s············1.9 | 279 | ·············_\x8c_\x8i_\x8s············1.9 |
| 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 | 280 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R61 |
| 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 | 281 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········6.3.3,·6.3 |
| 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r991589_rule | 282 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234802r991589_rule |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 288 | zypper·patch·-g·security·-y | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 289 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 290 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 291 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 292 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | 293 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch |
| 288 | -·name:·Security·patches·are·up·to·date | 294 | -·name:·Security·patches·are·up·to·date |
| 289 | ··package: | 295 | ··package: |
| Offset 302, 22 lines modified | Offset 310, 14 lines modified | ||
| 302 | ··-·high_disruption | 310 | ··-·high_disruption |
| 303 | ··-·low_complexity | 311 | ··-·low_complexity |
| 304 | ··-·medium_severity | 312 | ··-·medium_severity |
| 305 | ··-·patch_strategy | 313 | ··-·patch_strategy |
| 306 | ··-·reboot_required | 314 | ··-·reboot_required |
| 307 | ··-·security_patches_up_to_date | 315 | ··-·security_patches_up_to_date |
| 308 | ··-·skip_ansible_lint | 316 | ··-·skip_ansible_lint |
| 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | ||
| 312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···patch | ||
| 314 | zypper·patch·-g·security·-y | ||
| 315 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules | 317 | Group ·Account·and·Access·Control· Group·contains·6·groups·and·7·rules |
| 316 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, | 318 | _\x8[_\x8r_\x8e_\x8f_\x8] ·In·traditional·Unix·security,·if·an·attacker·gains·shell·access·to·a·certain·login·account, |
| 317 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it | 319 | they·can·perform·any·action·or·access·any·file·to·which·that·account·has·access.·Therefore,·making·it |
| 318 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged | 320 | more·difficult·for·unauthorized·people·to·gain·shell·access·to·accounts,·particularly·to·privileged |
| 319 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for | 321 | accounts,·is·a·necessary·part·of·securing·a·system.·This·section·introduces·mechanisms·for |
| 320 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. | 322 | restricting·access·to·accounts·under·SUSE·Linux·Enterprise·15. |
| 321 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules | 323 | Group ·Protect·Accounts·by·Configuring·PAM· Group·contains·2·groups·and·2·rules |
| Offset 526, 14 lines modified | Offset 526, 344 lines modified | ||
| 526 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) | 526 | ·············_\x8n_\x8i_\x8s_\x8t···········AC-9,·AC-9(1) |
| 527 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 527 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 528 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 | 528 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.2.4 |
| 529 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 529 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 530 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 | 530 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-020080 |
| 531 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4,·10.2.1,·10.2 | 531 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1.4,·10.2.1,·10.2 |
| 532 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r991589_rule | 532 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234873r991589_rule |
| 533 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 534 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 535 | if·rpm·--quiet·-q·pam;·then | ||
| 536 | if·[·-f·/usr/bin/authselect·];·then | ||
| 537 | ····if·authselect·list-features·sssd·|·grep·-q·with-silent-lastlog;·then | ||
| 538 | ········if·!·authselect·check;·then | ||
| 539 | ········echo·" | ||
| 540 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 541 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 542 | selected·profile·is·not·intact. | ||
| 543 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 544 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 545 | authselect·profile·is·recommended." | ||
| 546 | ········exit·1 | ||
| 547 | ········fi | ||
| 548 | ········authselect·disable-feature·with-silent-lastlog | ||
| 549 | ········authselect·apply-changes·-b | ||
| 550 | ····else | ||
| 551 | ········if·!·authselect·check;·then | ||
| 552 | ········echo·" | ||
| 553 | ········authselect·integrity·check·failed.·Remediation·aborted! | ||
| 554 | ········This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected·or·the | ||
| 555 | selected·profile·is·not·intact. | ||
| 556 | ········It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is·available. | ||
| 557 | ········In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a·custom | ||
| 558 | authselect·profile·is·recommended." | ||
| 559 | ········exit·1 | ||
| 560 | ········fi | ||
| 561 | ········CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| 562 | ········#·If·not·already·in·use,·a·custom·profile·is·created·preserving·the·enabled·features. | ||
| 563 | ········if·[[·!·$CURRENT_PROFILE·==·custom/*·]];·then | ||
| 564 | ············ENABLED_FEATURES=$(authselect·current·|·tail·-n+3·|·awk·'{·print·$2·}') | ||
| 565 | ············#·The·"local"·profile·does·not·contain·essential·security·features·required·by·multiple | ||
| 566 | Benchmarks. | ||
| 567 | ············#·If·currently·used,·it·is·replaced·by·"sssd",·which·is·the·best·option·in·this·case. | ||
| 568 | ············if·[[·$CURRENT_PROFILE·==·local·]];·then | ||
| 569 | ················CURRENT_PROFILE="sssd" | ||
| 570 | ············fi | ||
| 571 | ············authselect·create-profile·hardening·-b·$CURRENT_PROFILE | ||
| 572 | ············CURRENT_PROFILE="custom/hardening" | ||
| 573 | ············authselect·apply-changes·-b·--backup=before-hardening-custom-profile | ||
| 574 | ············authselect·select·$CURRENT_PROFILE | ||
| 575 | ············for·feature·in·$ENABLED_FEATURES;·do | ||
| 576 | ················authselect·enable-feature·$feature; | ||
| 577 | ············done | ||
| 578 | ············authselect·apply-changes·-b·--backup=after-hardening-custom-profile | ||
| 579 | ········fi | ||
| 580 | ········PAM_FILE_NAME=$(basename·"/etc/pam.d/login") | ||
| 581 | ········PAM_FILE_PATH="/etc/authselect/$CURRENT_PROFILE/$PAM_FILE_NAME" | ||
| 582 | ········authselect·apply-changes·-b | ||
| 583 | ········if·[·-e·"$PAM_FILE_PATH"·]·;·then | ||
| 584 | ············PAM_FILE_PATH="$PAM_FILE_PATH" | ||
| 585 | ············if·[·-f·/usr/bin/authselect·];·then | ||
| 586 | ················if·!·authselect·check;·then | ||
| 587 | ················echo·" | ||
| 588 | ················authselect·integrity·check·failed.·Remediation·aborted! | ||
| 589 | ················This·remediation·could·not·be·applied·because·an·authselect·profile·was·not·selected | ||
| 590 | or·the·selected·profile·is·not·intact. | ||
| 591 | ················It·is·not·recommended·to·manually·edit·the·PAM·files·when·authselect·tool·is | ||
| 592 | available. | ||
| 593 | ················In·cases·where·the·default·authselect·profile·does·not·cover·a·specific·demand,·a | ||
| 594 | custom·authselect·profile·is·recommended." | ||
| 595 | ················exit·1 | ||
| 596 | ················fi | ||
| 597 | ················CURRENT_PROFILE=$(authselect·current·-r·|·awk·'{·print·$1·}') | ||
| Max diff block lines reached; 926901/944877 bytes (98.10%) of diff not shown. | |||
| Offset 15106, 184 lines modified | Offset 15106, 184 lines modified | ||
| 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b020:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | 0003b020:·2223·6964·6d36·3336·3122·2074·6162·696e··"#idm6361"·tabin | ||
| 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b080:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003b0a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b0b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b0d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b0e0:·3631·223e·3c70·7265·3e3c·636f·6465·3e0a··61"><pre><code>. | |||
| 0003b0f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b0a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b0b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b0c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b0d0:·2269·646d·3633·3631·223e·3c74·6162·6c65··"idm6361"><table | |||
| 0003b0e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b0f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b1a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b1b0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b1c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b1d0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0003b1e0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0003b1f0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0003b200:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0003b210:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0003b220:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b230:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b240:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b250:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b260:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b270:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b280:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b290:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b2a0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b2b0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b2c0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b2d0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b2e0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b2f0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b300:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b310:·6465·5f69·6e73·7461·6c6c·6564·0a0a·2d20··de_installed..-· | |||
| 0003b320:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b330:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b340:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b350:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b360:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b370:·656e·3a20·2722·6b65·726e·656c·2d64·6566··en:·'"kernel-def | |||
| 0003b380:·6175·6c74·2220·696e·2061·6e73·6962·6c65··ault"·in·ansible | |||
| 0003b390:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0003b3a0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b3b0:·2d38·3332·3839·2d39·0a20·202d·2043·4a49··-83289-9.··-·CJI | |||
| 0003b3c0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b3d0:·4953·412d·5354·4947·2d53·4c45·532d·3135··ISA-STIG-SLES-15 | |||
| 0003b3e0:·2d30·3130·3431·390a·2020·2d20·4e49·5354··-010419.··-·NIST | |||
| 0003b3f0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b400:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b410:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b420:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b430:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b440:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b450:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b460:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b470:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b480:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b490:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b4a0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b4b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b4c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b4d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b4e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b4f0:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b500:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | |||
| 0003b510:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b520:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b530:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b540:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b550:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b560:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b570:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b580:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b590:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b | 0003b150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b160:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | |||
| 0003b170:·3336·3222·2074·6162·696e·6465·783d·2230··362"·tabindex="0 | |||
| 0003b180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b1a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b1b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b1c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b1d0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d36·3336··apse"·id="idm636 | |||
| 0003b220:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b250:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5b0:·6964·3d22·6964·6d36·3336·3222·3e3c·7072··id="idm6362"><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b5d0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b5e0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b5f0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b600:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b610:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b620:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| Max diff block lines reached; 21108007/21132047 bytes (99.89%) of diff not shown. | |||
| Offset 15193, 184 lines modified | Offset 15193, 184 lines modified | ||
| 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b580:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b590:·6964·6d32·3837·3022·2074·6162·696e·6465··idm2870"·tabinde | 0003b590:·6964·6d32·3837·3022·2074·6162·696e·6465··idm2870"·tabinde | ||
| 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b5a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b5b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b5c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b5d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b5e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b5f0:·656d·6564·6961·7469·6f6e·204 | 0003b5f0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b600:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b610:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b620:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b630:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b640:·646d·3238·3730·223e·3c74·6162·6c65·2063··dm2870"><table·c | |||
| 0003b650:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b660:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b670:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b680:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b690:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b6d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b6e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b6f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b | 0003b600:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b610:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b620:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b630:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b640:·7073·6522·2069·643d·2269·646d·3238·3730··pse"·id="idm2870 | |||
| 0003b650:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b660:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b670:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b680:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b690:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b6a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b6b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b6c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b6d0:·2d74·6172·6765·743d·2223·6964·6d32·3837··-target="#idm287 | |||
| 0003b6e0:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | |||
| 0003b6f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b700:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b710:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b720:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b730:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b740:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b750:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b760:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b770:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b780:·7365·2220·6964·3d22·6964·6d32·3837·3122··se"·id="idm2871" | |||
| 0003b790:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b7a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b7b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b7c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b7d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b7 | 0003b7e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b720:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b730:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b740:·2d20·6e61·6d65·3a20·4761·7468·6572·2074··-·name:·Gather·t | |||
| 0003b750:·6865·2070·6163·6b61·6765·2066·6163·7473··he·package·facts | |||
| 0003b760:·0a20·2070·6163·6b61·6765·5f66·6163·7473··.··package_facts | |||
| 0003b770:·3a0a·2020·2020·6d61·6e61·6765·723a·2061··:.····manager:·a | |||
| 0003b780:·7574·6f0a·2020·7461·6773·3a0a·2020·2d20··uto.··tags:.··-· | |||
| 0003b790:·4343·452d·3933·3735·382d·310a·2020·2d20··CCE-93758-1.··-· | |||
| 0003b7a0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b7b0:·2d20·4449·5341·2d53·5449·472d·534c·454d··-·DISA-STIG-SLEM | |||
| 0003b7c0:·2d30·352d·3635·3130·3130·0a20·202d·204e··-05-651010.··-·N | |||
| 0003b7d0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b7e0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b7f0:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b800:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b810:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b820:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b830:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b840:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b850:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b860:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b870:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b880:·5f69·6e73·7461·6c6c·6564·0a0a·2d20·6e61··_installed..-·na | |||
| 0003b890:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b8a0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b8b0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b8c0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b8d0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b8e0:·3a20·2722·6b65·726e·656c·2d64·6566·6175··:·'"kernel-defau | |||
| 0003b8f0:·6c74·2220·696e·2061·6e73·6962·6c65·5f66··lt"·in·ansible_f | |||
| 0003b900:·6163·7473·2e70·6163·6b61·6765·7327·0a20··acts.packages'.· | |||
| 0003b910:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b920:·3337·3538·2d31·0a20·202d·2043·4a49·532d··3758-1.··-·CJIS- | |||
| 0003b930:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b940:·412d·5354·4947·2d53·4c45·4d2d·3035·2d36··A-STIG-SLEM-05-6 | |||
| 0003b950:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b960:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b970:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b980:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b990:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b9a0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b9b0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b9c0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b9d0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b9e0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b9f0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003ba00:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003ba10:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003ba20:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ba30:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ba40:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ba50:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ba60:·7461·7267·6574·3d22·2369·646d·3238·3731··target="#idm2871 | |||
| 0003ba70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ba80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ba90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003baa0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bab0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bac0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bad0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003bae0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003baf0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bb00:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bb10:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bb20:·3d22·6964·6d32·3837·3122·3e3c·7072·653e··="idm2871"><pre> | |||
| 0003bb30:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003bb40:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003bb50:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003bb60:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bb70:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bb80:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bb90:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| Max diff block lines reached; 18050743/18074783 bytes (99.87%) of diff not shown. | |||
| Offset 15186, 183 lines modified | Offset 15186, 183 lines modified | ||
| 0003b510:·6765·743d·2223·6964·6d32·3837·3022·2074··get="#idm2870"·t | 0003b510:·6765·743d·2223·6964·6d32·3837·3022·2074··get="#idm2870"·t | ||
| 0003b520:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b520:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b530:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b530:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b540:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b540:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b550:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b550:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b560:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b560:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b570:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b570:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b580:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b590:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b580:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b590:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b5b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5c0:·2069·643d·2269·646d·3238·3730·223e·3c74···id="idm2870"><t | |||
| 0003b5d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b5e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b5f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b600:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b610:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b620:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b630:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b640:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b650:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b660:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b670:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b690:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b6a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b6b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b6c0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0003b6d0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0003b6e0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0003b6f0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0003b700:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0003b710:·3a0a·2020·2d20·4343·452d·3933·3735·382d··:.··-·CCE-93758- | |||
| 0003b720:·310a·2020·2d20·434a·4953·2d35·2e31·302e··1.··-·CJIS-5.10. | |||
| 0003b730:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b740:·472d·534c·454d·2d30·352d·3635·3130·3130··G-SLEM-05-651010 | |||
| 0003b750:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b760:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b770:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b780:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b790:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b7a0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b7b0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b7c0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b7d0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b7e0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b7f0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b800:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b810:·0a0a·2d20·6e61·6d65·3a20·456e·7375·7265··..-·name:·Ensure | |||
| 0003b820:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b830:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b840:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b850:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b860:·2020·7768·656e·3a20·2722·6b65·726e·656c····when:·'"kernel | |||
| 0003b870:·2d64·6566·6175·6c74·2220·696e·2061·6e73··-default"·in·ans | |||
| 0003b880:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 0003b890:·6765·7327·0a20·2074·6167·733a·0a20·202d··ges'.··tags:.··- | |||
| 0003b8a0:·2043·4345·2d39·3337·3538·2d31·0a20·202d···CCE-93758-1.··- | |||
| 0003b8b0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b8c0:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b8d0:·4d2d·3035·2d36·3531·3031·300a·2020·2d20··M-05-651010.··-· | |||
| 0003b8e0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b8f0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b900:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b910:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b920:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b930:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b940:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b950:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b960:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b970:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b980:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b990:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b9a0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b9b0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b9c0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b9d0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b9e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b9f0:·646d·3238·3731·2220·7461·6269·6e64·6578··dm2871"·tabindex | |||
| 0003ba00:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003ba10:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003ba20:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003ba30:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003ba40:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003ba50:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003ba60:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003ba70:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ba80:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ba90:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003baa0:·7365·2220·6964·3d22·6964·6d32·3837·3122··se"·id="idm2871" | |||
| 0003bab0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003bac0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003bad0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003bae0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003baf0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bb00:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bb10:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b | 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003bb30:·7461·7267·6574·3d22·2369·646d·3238·3732··target="#idm2872 | |||
| 0003bb40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bb50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bb60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bb70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bb80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bb90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bba0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0003bbb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bbc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bbd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bbe0:·2069·643d·2269·646d·3238·3732·223e·3c74···id="idm2872"><t | |||
| 0003bbf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003bc00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bc10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bc20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bc30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003bc40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003bc50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003b5d0:·646d·3238·3730·223e·3c70·7265·3e3c·636f··dm2870"><pre><co | ||
| 0003b5e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b5f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b600:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b610:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b620:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| Max diff block lines reached; 7487653/7511555 bytes (99.68%) of diff not shown. | |||
| Offset 130, 14 lines modified | Offset 130, 44 lines modified | ||
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 131 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 131 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 132 | ·············_\x8c_\x8i_\x8s············1.4.1 | 132 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 133 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 134 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 135 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 135 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 136 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 136 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 158 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 159 | zypper·install·-y·"aide" | ||
| 160 | else | ||
| 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 162 | fi | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Gather·the·package·facts | 168 | -·name:·Gather·the·package·facts |
| 143 | ··package_facts: | 169 | ··package_facts: |
| Offset 170, 44 lines modified | Offset 200, 14 lines modified | ||
| 170 | ··-·PCI-DSSv4-11.5.2 | 200 | ··-·PCI-DSSv4-11.5.2 |
| 171 | ··-·enable_strategy | 201 | ··-·enable_strategy |
| 172 | ··-·low_complexity | 202 | ··-·low_complexity |
| 173 | ··-·low_disruption | 203 | ··-·low_disruption |
| 174 | ··-·medium_severity | 204 | ··-·medium_severity |
| 175 | ··-·no_reboot_needed | 205 | ··-·no_reboot_needed |
| 176 | ··-·package_aide_installed | 206 | ··-·package_aide_installed |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 187 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 188 | zypper·install·-y·"aide" | ||
| 189 | else | ||
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 191 | fi | ||
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 197 | include·install_aide | ||
| 198 | class·install_aide·{ | ||
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/bin/aide·--init | 209 | $·sudo·/usr/bin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 207 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 211 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 208 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 212 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 209 | generated·database·can·be·installed·as·follows: | 213 | generated·database·can·be·installed·as·follows: |
| Offset 235, 14 lines modified | Offset 235, 26 lines modified | ||
| 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 235 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 236 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 236 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 237 | ·············_\x8c_\x8i_\x8s············1.4.1 | 237 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 238 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 238 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 239 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 240 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 241 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 243 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 244 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 245 | zypper·install·-y·"aide" | ||
| 246 | /usr/bin/aide·--init | ||
| 247 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 248 | else | ||
| 249 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 250 | fi | ||
| 242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 252 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 253 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 254 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 255 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 247 | -·name:·Gather·the·package·facts | 256 | -·name:·Gather·the·package·facts |
| 248 | ··package_facts: | 257 | ··package_facts: |
| Offset 355, 26 lines modified | Offset 367, 14 lines modified | ||
| 355 | ··-·PCI-DSSv4-11.5.2 | 367 | ··-·PCI-DSSv4-11.5.2 |
| 356 | ··-·aide_build_database | 368 | ··-·aide_build_database |
| 357 | ··-·low_complexity | 369 | ··-·low_complexity |
| 358 | ··-·low_disruption | 370 | ··-·low_disruption |
| 359 | ··-·medium_severity | 371 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 372 | ··-·no_reboot_needed |
| 361 | ··-·restrict_strategy | 373 | ··-·restrict_strategy |
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 363 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 364 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 919107/924207 bytes (99.45%) of diff not shown. | |||
| Offset 15172, 184 lines modified | Offset 15172, 184 lines modified | ||
| 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b430:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b440:·3238·3730·2220·7461·6269·6e64·6578·3d22··2870"·tabindex=" | 0003b440:·3238·3730·2220·7461·6269·6e64·6578·3d22··2870"·tabindex=" | ||
| 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b450:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b460:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b470:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b480:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b490:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b4a0:·6469·6174·696f·6e20·4 | 0003b4a0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b4b0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b4c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b4d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b4e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b4f0:·2220·6964·3d22·6964·6d32·3837·3022·3e3c··"·id="idm2870">< | |||
| 0003b500:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b510:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b520:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b530:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b4b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b4c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b4d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b4e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b4f0:·3837·3022·3e3c·7461·626c·6520·636c·6173··870"><table·clas | |||
| 0003b500:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b510:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b520:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b530:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b540:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b550:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b560:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b570:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b580:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b590:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b5a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b5b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b5c0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b5d0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b5e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b5f0:·616d·653a·2047·6174·6865·7220·7468·6520··ame:·Gather·the· | |||
| 0003b600:·7061·636b·6167·6520·6661·6374·730a·2020··package·facts.·· | |||
| 0003b610:·7061·636b·6167·655f·6661·6374·733a·0a20··package_facts:.· | |||
| 0003b620:·2020·206d·616e·6167·6572·3a20·6175·746f·····manager:·auto | |||
| 0003b630:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b640:·2d39·3337·3538·2d31·0a20·202d·2043·4a49··-93758-1.··-·CJI | |||
| 0003b650:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b660:·4953·412d·5354·4947·2d53·4c45·4d2d·3035··ISA-STIG-SLEM-05 | |||
| 0003b670:·2d36·3531·3031·300a·2020·2d20·4e49·5354··-651010.··-·NIST | |||
| 0003b680:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b690:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b6a0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b6b0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b6c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b6d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b6e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b6f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b700:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b710:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b720:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b730:·7374·616c·6c65·640a·0a2d·206e·616d·653a··stalled..-·name: | |||
| 0003b740:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b750:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b760:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b770:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b780:·7265·7365·6e74·0a20·2077·6865·6e3a·2027··resent.··when:·' | |||
| 0003b790:·226b·6572·6e65·6c2d·6465·6661·756c·7422··"kernel-default" | |||
| 0003b7a0:·2069·6e20·616e·7369·626c·655f·6661·6374···in·ansible_fact | |||
| 0003b7b0:·732e·7061·636b·6167·6573·270a·2020·7461··s.packages'.··ta | |||
| 0003b7c0:·6773·3a0a·2020·2d20·4343·452d·3933·3735··gs:.··-·CCE-9375 | |||
| 0003b7d0:·382d·310a·2020·2d20·434a·4953·2d35·2e31··8-1.··-·CJIS-5.1 | |||
| 0003b7e0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b7f0:·5449·472d·534c·454d·2d30·352d·3635·3130··TIG-SLEM-05-6510 | |||
| 0003b800:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b810:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b820:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b830:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b840:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b850:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b860:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b870:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b880:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b890:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b8a0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b8b0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b8c0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b | 0003b540:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b550:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b8e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b8f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b900:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b910:·6765·743d·2223·6964·6d32·3837·3122·2074··get="#idm2871"·t | |||
| 0003b920:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b930:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b940:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b950:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b960:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b970:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b980:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b990:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b9a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b9b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b9c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b9d0:·646d·3238·3731·223e·3c70·7265·3e3c·636f··dm2871"><pre><co | |||
| 0003b9e0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b9f0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ba00:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ba10:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ba20:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ba30:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ba40:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b | 0003b560:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b570:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b580:·7267·6574·3d22·2369·646d·3238·3731·2220··rget="#idm2871"· | |||
| 0003b590:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b5a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b5b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b5c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b5d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b5e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b5f0:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b600:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b610:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b620:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b630:·2069·643d·2269·646d·3238·3731·223e·3c74···id="idm2871"><t | |||
| 0003b640:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b650:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b660:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b670:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b680:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| Max diff block lines reached; 7225211/7249251 bytes (99.67%) of diff not shown. | |||
| Offset 127, 14 lines modified | Offset 127, 44 lines modified | ||
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | include·install_aide | ||
| 144 | class·install_aide·{ | ||
| 145 | ··package·{·'aide': | ||
| 146 | ····ensure·=>·'installed', | ||
| 147 | ··} | ||
| 148 | } | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 155 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 156 | zypper·install·-y·"aide" | ||
| 157 | else | ||
| 158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 159 | fi | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | -·name:·Gather·the·package·facts | 165 | -·name:·Gather·the·package·facts |
| 140 | ··package_facts: | 166 | ··package_facts: |
| Offset 167, 44 lines modified | Offset 197, 14 lines modified | ||
| 167 | ··-·PCI-DSSv4-11.5.2 | 197 | ··-·PCI-DSSv4-11.5.2 |
| 168 | ··-·enable_strategy | 198 | ··-·enable_strategy |
| 169 | ··-·low_complexity | 199 | ··-·low_complexity |
| 170 | ··-·low_disruption | 200 | ··-·low_disruption |
| 171 | ··-·medium_severity | 201 | ··-·medium_severity |
| 172 | ··-·no_reboot_needed | 202 | ··-·no_reboot_needed |
| 173 | ··-·package_aide_installed | 203 | ··-·package_aide_installed |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 184 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 185 | zypper·install·-y·"aide" | ||
| 186 | else | ||
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 188 | fi | ||
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 194 | include·install_aide | ||
| 195 | class·install_aide·{ | ||
| 196 | ··package·{·'aide': | ||
| 197 | ····ensure·=>·'installed', | ||
| 198 | ··} | ||
| 199 | } | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 202 | $·sudo·/usr/bin/aide·--init | 206 | $·sudo·/usr/bin/aide·--init |
| 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 204 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 208 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 205 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 209 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 206 | generated·database·can·be·installed·as·follows: | 210 | generated·database·can·be·installed·as·follows: |
| Offset 232, 14 lines modified | Offset 232, 26 lines modified | ||
| 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 232 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 233 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 233 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 234 | ·············_\x8c_\x8i_\x8s············1.4.1 | 234 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 235 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 235 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 236 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 236 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 237 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 237 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 238 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 238 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 240 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 241 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 242 | zypper·install·-y·"aide" | ||
| 243 | /usr/bin/aide·--init | ||
| 244 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 245 | else | ||
| 246 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 247 | fi | ||
| 239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 248 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 249 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 250 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 251 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 252 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 244 | -·name:·Gather·the·package·facts | 253 | -·name:·Gather·the·package·facts |
| 245 | ··package_facts: | 254 | ··package_facts: |
| Offset 352, 26 lines modified | Offset 364, 14 lines modified | ||
| 352 | ··-·PCI-DSSv4-11.5.2 | 364 | ··-·PCI-DSSv4-11.5.2 |
| 353 | ··-·aide_build_database | 365 | ··-·aide_build_database |
| 354 | ··-·low_complexity | 366 | ··-·low_complexity |
| 355 | ··-·low_disruption | 367 | ··-·low_disruption |
| 356 | ··-·medium_severity | 368 | ··-·medium_severity |
| 357 | ··-·no_reboot_needed | 369 | ··-·no_reboot_needed |
| 358 | ··-·restrict_strategy | 370 | ··-·restrict_strategy |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 360 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 361 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 888675/893775 bytes (99.43%) of diff not shown. | |||
| Offset 15185, 184 lines modified | Offset 15185, 184 lines modified | ||
| 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b500:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b510:·6d32·3837·3022·2074·6162·696e·6465·783d··m2870"·tabindex= | 0003b510:·6d32·3837·3022·2074·6162·696e·6465·783d··m2870"·tabindex= | ||
| 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b520:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b530:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b540:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b550:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b560:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b570:·6564·6961·7469·6f6e·204 | 0003b570:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b580:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b590:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b5a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b5b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b5c0:·3238·3730·223e·3c74·6162·6c65·2063·6c61··2870"><table·cla | |||
| 0003b5d0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5e0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5f0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b600:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b610:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b620:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b | 0003b580:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b590:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b5a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b5b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b5c0:·6522·2069·643d·2269·646d·3238·3730·223e··e"·id="idm2870"> | |||
| 0003b5d0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b5e0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b5f0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b600:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b610:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b620:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b630:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b640:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b650:·6172·6765·743d·2223·6964·6d32·3837·3122··arget="#idm2871" | |||
| 0003b660:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b670:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b680:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b690:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b6a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b6b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b6c0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b6d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b6e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b6f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b700:·2220·6964·3d22·6964·6d32·3837·3122·3e3c··"·id="idm2871">< | |||
| 0003b710:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b720:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b730:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b740:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b750:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b760:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b660:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b670:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b680:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b690:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b6a0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b6b0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b6c0:·6e61·6d65·3a20·4761·7468·6572·2074·6865··name:·Gather·the | |||
| 0003b6d0:·2070·6163·6b61·6765·2066·6163·7473·0a20···package·facts.· | |||
| 0003b6e0:·2070·6163·6b61·6765·5f66·6163·7473·3a0a···package_facts:. | |||
| 0003b6f0:·2020·2020·6d61·6e61·6765·723a·2061·7574······manager:·aut | |||
| 0003b700:·6f0a·2020·7461·6773·3a0a·2020·2d20·4343··o.··tags:.··-·CC | |||
| 0003b710:·452d·3933·3735·382d·310a·2020·2d20·434a··E-93758-1.··-·CJ | |||
| 0003b720:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b730:·4449·5341·2d53·5449·472d·534c·454d·2d30··DISA-STIG-SLEM-0 | |||
| 0003b740:·352d·3635·3130·3130·0a20·202d·204e·4953··5-651010.··-·NIS | |||
| 0003b750:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b760:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b770:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b780:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b790:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b7a0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b7b0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b7c0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b7d0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b7e0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b7f0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b800:·6e73·7461·6c6c·6564·0a0a·2d20·6e61·6d65··nstalled..-·name | |||
| 0003b810:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b820:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b830:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b840:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b850:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b860:·2722·6b65·726e·656c·2d64·6566·6175·6c74··'"kernel-default | |||
| 0003b870:·2220·696e·2061·6e73·6962·6c65·5f66·6163··"·in·ansible_fac | |||
| 0003b880:·7473·2e70·6163·6b61·6765·7327·0a20·2074··ts.packages'.··t | |||
| 0003b890:·6167·733a·0a20·202d·2043·4345·2d39·3337··ags:.··-·CCE-937 | |||
| 0003b8a0:·3538·2d31·0a20·202d·2043·4a49·532d·352e··58-1.··-·CJIS-5. | |||
| 0003b8b0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b8c0:·5354·4947·2d53·4c45·4d2d·3035·2d36·3531··STIG-SLEM-05-651 | |||
| 0003b8d0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b8e0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b8f0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b900:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b910:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b920:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b930:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b940:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b950:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b960:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b970:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b980:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b990:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b9a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b9b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b9c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b9d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b9e0:·7267·6574·3d22·2369·646d·3238·3731·2220··rget="#idm2871"· | |||
| 0003b9f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003ba00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003ba10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ba20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003ba30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ba40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003ba50:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003ba60:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003ba70:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003ba80:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003ba90:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003baa0:·6964·6d32·3837·3122·3e3c·7072·653e·3c63··idm2871"><pre><c | |||
| 0003bab0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003bac0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bad0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bae0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003baf0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bb00:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bb10:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| Max diff block lines reached; 17967232/17991272 bytes (99.87%) of diff not shown. | |||
| Offset 15110, 184 lines modified | Offset 15110, 184 lines modified | ||
| 0003b050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b060:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | 0003b060:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | ||
| 0003b070:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b070:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b080:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b080:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b090:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b090:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0c0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b0c0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b0d0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b0e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b0f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b100:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b110:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b120:·3837·3022·3e3c·7072·653e·3c63·6f64·653e··870"><pre><code> | |||
| 0003b130:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b140:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b150:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b160:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b170:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b180:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b190:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b1a0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1b0:·3238·3731·2220·7461·6269·6e64·6578·3d22··2871"·tabindex=" | |||
| 0003b1c0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b1d0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b1e0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b1f0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b200:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b210:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b220:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b230:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b0d0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b0e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b0f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b100:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b110:·3d22·6964·6d32·3837·3022·3e3c·7461·626c··="idm2870"><tabl | |||
| 0003b120:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b130:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b140:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b150:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b160:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b170:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b180:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b190:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1b0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1c0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b1d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b1e0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b1f0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b200:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b210:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b220:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b230:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b240:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b250:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b260:·202d·2043·4345·2d39·3337·3538·2d31·0a20···-·CCE-93758-1.· | |||
| 0003b270:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b280:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b290:·4c45·4d2d·3035·2d36·3531·3031·300a·2020··LEM-05-651010.·· | |||
| 0003b2a0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b2b0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b2c0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b2d0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b2e0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b2f0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b300:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b310:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b320:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b330:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b340:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b350:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b360:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b370:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b380:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b390:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b3a0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b3b0:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003b3c0:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b3d0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b3e0:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b3f0:·452d·3933·3735·382d·310a·2020·2d20·434a··E-93758-1.··-·CJ | |||
| 0003b400:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b410:·4449·5341·2d53·5449·472d·534c·454d·2d30··DISA-STIG-SLEM-0 | |||
| 0003b420:·352d·3635·3130·3130·0a20·202d·204e·4953··5-651010.··-·NIS | |||
| 0003b430:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b440:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b450:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b460:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b470:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b480:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b490:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b4a0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b4b0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b4c0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b4d0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b4e0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b4f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b500:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b510:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b | 0003b240:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0003b250:·6c61·7073·6522·2069·643d·2269·646d·3238··lapse"·id="idm28 | |||
| 0003b260:·3731·223e·3c74·6162·6c65·2063·6c61·7373··71"><table·class | |||
| 0003b270:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b280:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b290:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b2a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b2b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b530:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b540:·3837·3122·2074·6162·696e·6465·783d·2230··871"·tabindex="0 | |||
| 0003b550:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b560:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b570:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b580:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b590:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b5a0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b5b0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b5c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b5d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b5e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b5f0:·2069·643d·2269·646d·3238·3731·223e·3c70···id="idm2871"><p | |||
| 0003b600:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b610:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b620:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b630:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b640:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b650:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| Max diff block lines reached; 13705554/13729594 bytes (99.82%) of diff not shown. | |||
| Offset 115, 14 lines modified | Offset 115, 44 lines modified | ||
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 143 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 144 | zypper·install·-y·"aide" | ||
| 145 | else | ||
| 146 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 147 | fi | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Gather·the·package·facts | 153 | -·name:·Gather·the·package·facts |
| 128 | ··package_facts: | 154 | ··package_facts: |
| Offset 155, 44 lines modified | Offset 185, 14 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 185 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 186 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 187 | ··-·low_complexity |
| 158 | ··-·low_disruption | 188 | ··-·low_disruption |
| 159 | ··-·medium_severity | 189 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 190 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 191 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 172 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 173 | zypper·install·-y·"aide" | ||
| 174 | else | ||
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 176 | fi | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | include·install_aide | ||
| 183 | class·install_aide·{ | ||
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/bin/aide·--init | 194 | $·sudo·/usr/bin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 192 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 196 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 193 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 197 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 194 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 220, 14 lines modified | Offset 220, 26 lines modified | ||
| 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 220 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 222 | ·············_\x8c_\x8i_\x8s············1.4.1 | 222 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 223 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 224 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 225 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 226 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 226 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 228 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 229 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 230 | zypper·install·-y·"aide" | ||
| 231 | /usr/bin/aide·--init | ||
| 232 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 233 | else | ||
| 234 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 235 | fi | ||
| 227 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 236 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 228 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 237 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 229 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 238 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 230 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 239 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 231 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 240 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 232 | -·name:·Gather·the·package·facts | 241 | -·name:·Gather·the·package·facts |
| 233 | ··package_facts: | 242 | ··package_facts: |
| Offset 340, 26 lines modified | Offset 352, 14 lines modified | ||
| 340 | ··-·PCI-DSSv4-11.5.2 | 352 | ··-·PCI-DSSv4-11.5.2 |
| 341 | ··-·aide_build_database | 353 | ··-·aide_build_database |
| 342 | ··-·low_complexity | 354 | ··-·low_complexity |
| 343 | ··-·low_disruption | 355 | ··-·low_disruption |
| 344 | ··-·medium_severity | 356 | ··-·medium_severity |
| 345 | ··-·no_reboot_needed | 357 | ··-·no_reboot_needed |
| 346 | ··-·restrict_strategy | 358 | ··-·restrict_strategy |
| 347 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 348 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 349 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 1253494/1258588 bytes (99.60%) of diff not shown. | |||
| Offset 15124, 184 lines modified | Offset 15124, 184 lines modified | ||
| 0003b130:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b130:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b140:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | 0003b140:·3d22·2369·646d·3238·3730·2220·7461·6269··="#idm2870"·tabi | ||
| 0003b150:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b150:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b160:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b160:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b170:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b170:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b180:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b180:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b190:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b190:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1a0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b1a0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b1b0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b1c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b1d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b1e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b1f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b200:·3837·3022·3e3c·7072·653e·3c63·6f64·653e··870"><pre><code> | |||
| 0003b210:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b220:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b230:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b240:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b250:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b260:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1b0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b1c0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b1d0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b1e0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b1f0:·3d22·6964·6d32·3837·3022·3e3c·7461·626c··="idm2870"><tabl | |||
| 0003b200:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b210:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b220:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b230:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b240:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b250:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b260:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b270:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b280:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b290:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b2a0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b2b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b2c0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b2d0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b2e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b2f0:·6465·3e2d·206e·616d·653a·2047·6174·6865··de>-·name:·Gathe | |||
| 0003b300:·7220·7468·6520·7061·636b·6167·6520·6661··r·the·package·fa | |||
| 0003b310:·6374·730a·2020·7061·636b·6167·655f·6661··cts.··package_fa | |||
| 0003b320:·6374·733a·0a20·2020·206d·616e·6167·6572··cts:.····manager | |||
| 0003b330:·3a20·6175·746f·0a20·2074·6167·733a·0a20··:·auto.··tags:.· | |||
| 0003b340:·202d·2043·4345·2d39·3337·3538·2d31·0a20···-·CCE-93758-1.· | |||
| 0003b350:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b360:·0a20·202d·2044·4953·412d·5354·4947·2d53··.··-·DISA-STIG-S | |||
| 0003b370:·4c45·4d2d·3035·2d36·3531·3031·300a·2020··LEM-05-651010.·· | |||
| 0003b380:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b390:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b3a0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b3b0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b3c0:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b3d0:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b3e0:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b3f0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b400:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b410:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b420:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b430:·6964·655f·696e·7374·616c·6c65·640a·0a2d··ide_installed..- | |||
| 0003b440:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b450:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b460:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b470:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b480:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b490:·6865·6e3a·2027·226b·6572·6e65·6c2d·6465··hen:·'"kernel-de | |||
| 0003b4a0:·6661·756c·7422·2069·6e20·616e·7369·626c··fault"·in·ansibl | |||
| 0003b4b0:·655f·6661·6374·732e·7061·636b·6167·6573··e_facts.packages | |||
| 0003b4c0:·270a·2020·7461·6773·3a0a·2020·2d20·4343··'.··tags:.··-·CC | |||
| 0003b4d0:·452d·3933·3735·382d·310a·2020·2d20·434a··E-93758-1.··-·CJ | |||
| 0003b4e0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b4f0:·4449·5341·2d53·5449·472d·534c·454d·2d30··DISA-STIG-SLEM-0 | |||
| 0003b500:·352d·3635·3130·3130·0a20·202d·204e·4953··5-651010.··-·NIS | |||
| 0003b510:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b520:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b530:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b540:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b550:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b560:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b570:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b580:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b590:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b5a0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b5b0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b5c0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b5d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b5e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b5f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b600:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b610:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b620:·3837·3122·2074·6162·696e·6465·783d·2230··871"·tabindex="0 | |||
| 0003b630:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b640:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b650:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b660:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b670:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b680:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | |||
| 0003b690:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b6a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b6b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b | 0003b270:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | ||
| 0003b280:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b290:·3238·3731·2220·7461·6269·6e64·6578·3d22··2871"·tabindex=" | |||
| 0003b2a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b2b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b2c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b2d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b2e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b2f0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b300:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b310:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b320:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b330:·6c61·7073·6522·2069·643d·2269·646d·3238··lapse"·id="idm28 | |||
| 0003b340:·3731·223e·3c74·6162·6c65·2063·6c61·7373··71"><table·class | |||
| 0003b350:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b360:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b370:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b380:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b390:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b6d0:·2069·643d·2269·646d·3238·3731·223e·3c70···id="idm2871"><p | |||
| 0003b6e0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b6f0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b700:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b710:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b720:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b730:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| Max diff block lines reached; 14652732/14676772 bytes (99.84%) of diff not shown. | |||
| Offset 117, 14 lines modified | Offset 117, 44 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8c_\x8i_\x8s············1.4.1 | 119 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | include·install_aide | ||
| 134 | class·install_aide·{ | ||
| 135 | ··package·{·'aide': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | } | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 145 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 146 | zypper·install·-y·"aide" | ||
| 147 | else | ||
| 148 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 149 | fi | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Gather·the·package·facts | 155 | -·name:·Gather·the·package·facts |
| 130 | ··package_facts: | 156 | ··package_facts: |
| Offset 157, 44 lines modified | Offset 187, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 187 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 188 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 189 | ··-·low_complexity |
| 160 | ··-·low_disruption | 190 | ··-·low_disruption |
| 161 | ··-·medium_severity | 191 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 192 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 193 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 174 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 175 | zypper·install·-y·"aide" | ||
| 176 | else | ||
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 178 | fi | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | include·install_aide | ||
| 185 | class·install_aide·{ | ||
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/bin/aide·--init | 196 | $·sudo·/usr/bin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 194 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 198 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 195 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 199 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 196 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 222, 14 lines modified | Offset 222, 26 lines modified | ||
| 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 222 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 223 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 224 | ·············_\x8c_\x8i_\x8s············1.4.1 | 224 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 225 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 225 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 226 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 | 227 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLEM-05-651010 |
| 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule | 228 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-261403r996627_rule |
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 230 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 231 | if·rpm·--quiet·-q·kernel-default;·then | ||
| 232 | zypper·install·-y·"aide" | ||
| 233 | /usr/bin/aide·--init | ||
| 234 | /bin/cp·-p·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | ||
| 235 | else | ||
| 236 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | ||
| 237 | fi | ||
| 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 238 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 239 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 240 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 241 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 242 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 234 | -·name:·Gather·the·package·facts | 243 | -·name:·Gather·the·package·facts |
| 235 | ··package_facts: | 244 | ··package_facts: |
| Offset 342, 26 lines modified | Offset 354, 14 lines modified | ||
| 342 | ··-·PCI-DSSv4-11.5.2 | 354 | ··-·PCI-DSSv4-11.5.2 |
| 343 | ··-·aide_build_database | 355 | ··-·aide_build_database |
| 344 | ··-·low_complexity | 356 | ··-·low_complexity |
| 345 | ··-·low_disruption | 357 | ··-·low_disruption |
| 346 | ··-·medium_severity | 358 | ··-·medium_severity |
| 347 | ··-·no_reboot_needed | 359 | ··-·no_reboot_needed |
| 348 | ··-·restrict_strategy | 360 | ··-·restrict_strategy |
| 349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 350 | #·Remediation·is·applicable·only·in·certain·platforms | ||
| 351 | if·rpm·--quiet·-q·kernel-default;·then | ||
| Max diff block lines reached; 1349188/1354282 bytes (99.62%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d4 | 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | ||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | ||
| 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | ||
| 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004a0:·2020·2020·2054·6865·2053·4d4 | 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | ||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | ||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | ||
| 000004d0:·6d6f·6465·2066·726f·6d20·6578·6563·7574··mode·from·execut | |||
| 000004e0:·696e·6720·7573·6572·2073·7061·6365·2063··ing·user·space·c | |||
| 000004f0:·6f64·652c·0a69·7420·6973·2065·6e61·626c··ode,.it·is·enabl | |||
| 00000500:·6564·2062·7920·6465·6661·756c·7420·7369··ed·by·default·si | |||
| 00000510:·6e63·6520·4c69·6e75·7820·6b65·726e·656c··nce·Linux·kernel | |||
| 00000 | 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | ||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005 | 000005c0:·7320·6e6f·7420·6469·7361·626c·6564·2062··s·not·disabled·b | ||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000540:·6872·6f75·6768·0a6b·6572·6e65·6c20·626f··hrough.kernel·bo | |||
| 00000550:·6f74·2070·6172·616d·6574·6572·732e·0a0a··ot·parameters... | |||
| 00000560:·456e·7375·7265·2074·6861·7420·5375·7065··Ensure·that·Supe | |||
| 00000570:·7276·6973·6f72·204d·6f64·6520·4578·6563··rvisor·Mode·Exec | |||
| 00000580:·7574·696f·6e20·5072·6576·656e·7469·6f6e··ution·Prevention | |||
| 00000590:·2028·534d·4550·2920·6973·206e·6f74·2064···(SMEP)·is·not·d | |||
| 000005a0:·6973·6162·6c65·6420·6279·0a74·6865·203c··isabled·by.the·< | |||
| 000005b0:·7474·3e6e·6f73·6d65·703c·2f74·743e·2062··tt>nosmep</tt>·b | |||
| 000005c0:·6f6f·7420·7061·7261·6d65·6e74·6572·206f··oot·paramenter·o | |||
| 000005d0:·7074·696f·6e2e·0a0a·4368·6563·6b20·7468··ption...Check·th | |||
| 000005e0:·6174·2074·6865·206c·696e·6520·3c70·7265··at·the·line·<pre | |||
| 000005f0:·3e47·5255·425f·434d·444c·494e·455f·4c49··>GRUB_CMDLINE_LI | |||
| 00000600:·4e55·583d·222e·2e2e·223c·2f70·7265·3e20··NUX="..."</pre>· | |||
| 00000610:·7769·7468·696e·203c·7474·3e2f·6574·632f··within·<tt>/etc/ | |||
| 00000620:·6465·6661·756c·742f·6772·7562·3c2f·7474··default/grub</tt | |||
| 00000630:·3e0a·646f·6573·6e27·7420·636f·6e74·6169··>.doesn't·contai | |||
| 00000640:·6e20·7468·6520·6172·6775·6d65·6e74·203c··n·the·argument·< | |||
| 00000650:·7474·3e6e·6f73·6d65·703c·2f74·743e·2e0a··tt>nosmep</tt>.. | |||
| 00000660:·5275·6e20·7468·6520·666f·6c6c·6f77·696e··Run·the·followin | |||
| 00000670:·6720·636f·6d6d·616e·6420·746f·2075·7064··g·command·to·upd | |||
| 00000680:·6174·6520·636f·6d6d·616e·6420·6c69·6e65··ate·command·line | |||
| 00000690:·2066·6f72·2061·6c72·6561·6479·2069·6e73···for·already·ins | |||
| 000006a0:·7461·6c6c·6564·206b·6572·6e65·6c73·3a0a··talled·kernels:. | |||
| 000006b0:·3c70·7265·3e23·2067·7275·6262·7920·2d2d··<pre>#·grubby·-- | |||
| 000006c0:·7570·6461·7465·2d6b·6572·6e65·6c3d·414c··update-kernel=AL | |||
| 000006d0:·4c20·2d2d·7265·6d6f·7665·2d61·7267·733d··L·--remove-args= | |||
| 000006e0:·226e·6f73·6d65·7022·3c2f·7072·653e·0a20··"nosmep"</pre>.· | |||
| 000006f0:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | |||
| 00000700:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000710:·6e2d·5553·223e·0a20·2020·2020·2020·2044··n-US">.········D | |||
| 00000720:·6973·6162·6c69·6e67·2053·4d45·5020·6361··isabling·SMEP·ca | |||
| 00000730:·6e20·6661·6369·6c69·7461·7465·2065·7870··n·facilitate·exp | |||
| 00000740:·6c6f·6974·6174·696f·6e20·6f66·2063·6572··loitation·of·cer | |||
| 00000750:·7461·696e·2076·756c·6e65·7261·6269·6c69··tain·vulnerabili | |||
| 00000760:·7469·6573·2062·6563·6175·7365·2069·7420··ties·because·it· | |||
| 00000770:·616c·6c6f·7773·0a74·6865·206b·6572·6e65··allows.the·kerne | |||
| 00000780:·6c20·746f·2075·6e69·6e74·656e·7469·6f6e··l·to·unintention | |||
| 00000790:·616c·6c79·2065·7865·6375·7465·2063·6f64··ally·execute·cod | |||
| 000007a0:·6520·696e·206c·6573·7320·7072·6976·696c··e·in·less·privil | |||
| 000007b0:·6567·6564·206d·656d·6f72·7920·7370·6163··eged·memory·spac | |||
| 000007c0:·652e·0a20·2020·2020·203c·2f74·643e·0a20··e..······</td>.· | |||
| 000007d0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | |||
| 000007e0:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | |||
| 000007f0:·7464·3e0a·2020·2020·2020·3c74·643e·496e··td>.······<td>In | |||
| 00000800:·7374·616c·6c20·5041·4520·4b65·726e·656c··stall·PAE·Kernel | |||
| 00000810:·206f·6e20·5375·7070·6f72·7465·6420·3332···on·Supported·32 | |||
| 00000820:·2d62·6974·2078·3836·2053·7973·7465·6d73··-bit·x86·Systems | |||
| 00000830:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | |||
| 00000840:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | |||
| 00000850:·3e0a·2020·2020·2020·2020·5379·7374·656d··>.········System | |||
| 00000860:·7320·7468·6174·2061·7265·2075·7369·6e67··s·that·are·using | |||
| 00000870:·2074·6865·2036·342d·6269·7420·7838·3620···the·64-bit·x86· | |||
| 00000880:·6b65·726e·656c·2070·6163·6b61·6765·0a64··kernel·package.d | |||
| 00000890:·6f20·6e6f·7420·6e65·6564·2074·6f20·696e··o·not·need·to·in | |||
| 000008a0:·7374·616c·6c20·7468·6520·6b65·726e·656c··stall·the·kernel | |||
| 000008b0:·2d50·4145·2070·6163·6b61·6765·2062·6563··-PAE·package·bec | |||
| 000008c0:·6175·7365·2074·6865·2036·342d·6269·740a··ause·the·64-bit. | |||
| 000008d0:·7838·3620·6b65·726e·656c·2061·6c72·6561··x86·kernel·alrea | |||
| 000008e0:·6479·2069·6e63·6c75·6465·7320·7468·6973··dy·includes·this | |||
| 000008f0:·2073·7570·706f·7274·2e20·486f·7765·7665···support.·Howeve | |||
| 00000900:·722c·2069·6620·7468·6520·7379·7374·656d··r,·if·the·system | |||
| 00000910:·2069·730a·3332·2d62·6974·2061·6e64·2061···is.32-bit·and·a | |||
| 00000920:·6c73·6f20·7375·7070·6f72·7473·2074·6865··lso·supports·the | |||
| 00000930:·2050·4145·2061·6e64·204e·5820·6665·6174···PAE·and·NX·feat | |||
| 00000940:·7572·6573·2061·730a·6465·7465·726d·696e··ures·as.determin | |||
| 00000950:·6564·2069·6e20·7468·6520·7072·6576·696f··ed·in·the·previo | |||
| 00000960:·7573·2073·6563·7469·6f6e·2c20·7468·6520··us·section,·the· | |||
| 00000970:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 00000980:·6765·2073·686f·756c·640a·6265·2069·6e73··ge·should.be·ins | |||
| 00000990:·7461·6c6c·6564·2074·6f20·656e·6162·6c65··talled·to·enable | |||
| 000009a0:·2058·4420·6f72·204e·5820·7375·7070·6f72···XD·or·NX·suppor | |||
| 000009b0:·742e·0a54·6865·203c·636f·6465·3e6b·6572··t..The·<code>ker | |||
| 000009c0:·6e65·6c2d·5041·453c·2f63·6f64·653e·2070··nel-PAE</code>·p | |||
| 000009d0:·6163·6b61·6765·2063·616e·2062·6520·696e··ackage·can·be·in | |||
| 000009e0:·7374·616c·6c65·6420·7769·7468·2074·6865··stalled·with·the | |||
| 00000 | 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | ||
| 00000a00:·6e64·3a0a·3c70·7265·3e0a·2420·7375·646f··nd:.<pre>.$·sudo | |||
| 00000a10:·2079·756d·2069·6e73·7461·6c6c·206b·6572···yum·install·ker | |||
| 00000a20:·6e65·6c2d·5041·453c·2f70·7265·3e0a·5468··nel-PAE</pre>.Th | |||
| Max diff block lines reached; 2986143/3022183 bytes (98.81%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 29 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 7 | 2 | 7 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 19 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 4 | ······························mode·from·executing·user·space·code,·it·is | 20 | ······························mode·from·executing·user·space·code,·it·is |
| 5 | ······························enabled·by·default·since·Linux·kernel·3.0. | 21 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 6 | ······························But·it·could·be·disabled·through·kernel·boot | 22 | ······························But·it·could·be·disabled·through·kernel·boot |
| 7 | ······························parameters.·Ensure·that·Supervisor·Mode | 23 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 24 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 25 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 15, 14 lines modified | Offset 31, 21 lines modified | ||
| 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 17 | ······························argument·nosmep.·Run·the·following·command | 33 | ······························argument·nosmep.·Run·the·following·command |
| 18 | ······························to·update·command·line·for·already·installed | 34 | ······························to·update·command·line·for·already·installed |
| 19 | ······························kernels: | 35 | ······························kernels: |
| 20 | ······························#·grubby·--update-kernel=ALL·--remove- | 36 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 21 | ······························args="nosmep" | 37 | ······························args="nosmep" |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 22 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 45 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 23 | ······························package·do·not·need·to·install·the·kernel- | 46 | ······························package·do·not·need·to·install·the·kernel- |
| 24 | ······························PAE·package·because·the·64-bit·x86·kernel | 47 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 25 | ······························already·includes·this·support.·However,·if | 48 | ······························already·includes·this·support.·However,·if |
| 26 | ······························the·system·is·32-bit·and·also·supports·the | 49 | ······························the·system·is·32-bit·and·also·supports·the |
| 27 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 50 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 28 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 51 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 39, 37 lines modified | Offset 62, 14 lines modified | ||
| 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| 44 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and |
| 45 | ···········································································validated. | 68 | ···········································································validated. |
| 46 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 47 | ······························mode·from·unintentionally·reading/writing | ||
| 48 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 49 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 50 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 51 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 52 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 53 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 54 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 57 | ······························argument·nosmap.·Run·the·following·command | ||
| 58 | ······························to·update·command·line·for·already·installed | ||
| 59 | ······························kernels: | ||
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 61 | ······························args="nosmap" | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 14 lines modified | Offset 99, 125 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being | ||
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·-- | ||
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························The·kernel·may·merge·similar·slabs·together | ||
| 121 | ······························to·reduce·overhead·and·increase·cache | ||
| 122 | ······························hotness·of·objects.·Disabling·merging·of | ||
| 123 | ······························slabs·keeps·the·slabs·separate·and·reduces | ||
| 124 | ······························the·risk·of·kernel·heap·overflows | ||
| 125 | ······························overwriting·objects·in·merged·caches.·To·····Disabling·the·merge·of·slabs·of | ||
| 126 | ······························disable·merging·of·slabs·in·the·Kernel·add···similar·sizes·prevents·the·kernel·from | ||
| 127 | ······························the·argument·slab_nomerge=yes·to·the·default·merging·a·seemingly·useless·but | ||
| 128 | ······························GRUB·2·command·line·for·the·Linux·operating··vulnerable·slab·with·a·useful·and | ||
| 129 | ······························system.·To·ensure·that·slab_nomerge=yes·is···valuable·slab.·This·increase·the·risk | ||
| 130 | R8··Disable·merging·of·slabs··added·as·a·kernel·command·line·argument·to···that·a·heap·overflow·could·overwrite | ||
| 131 | ····with·similar·size·········newly·installed·kernels,·add·················objects·from·merged·caches,·with | ||
| 132 | ······························slab_nomerge=yes·to·the·default·Grub2········unmerged·caches·the·heap·overflow | ||
| 133 | ······························command·line·for·Linux·operating·systems.····would·only·affect·the·objects·in·the | ||
| 134 | ······························Modify·the·line·within·/etc/default/grub·as··same·cache.·Overall,·this·reduces·the | ||
| 135 | ······························shown·below:·································kernel·attack·surface·area·by | ||
| Max diff block lines reached; 667895/685922 bytes (97.37%) of diff not shown. | |||
| Offset 40, 57 lines modified | Offset 40, 14 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·7's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td>Disable·SSH·Root·Login</td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········The·root·user·should·never·be·allowed·to·login·to·a | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 94 | system·directly·over·a·network. | 51 | system·directly·over·a·network. |
| 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 105, 51 lines modified | Offset 62, 31 lines modified | ||
| 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 107 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 108 | ······</td> | 65 | ······</td> |
| 109 | ····</tr> | 66 | ····</tr> |
| 110 | ····<tr> | 67 | ····<tr> |
| 111 | ······<td>3.1.1</td> | 68 | ······<td>3.1.1</td> |
| 112 | ······<td>Disable·GDM· | 69 | ······<td>Disable·GDM·Guest·Login</td> |
| 113 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials |
| 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | 72 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | |
| 73 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 74 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | 75 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: |
| 119 | <pre>[daemon] | 76 | <pre>[daemon] |
| 120 | 77 | TimedLoginEnable=false</pre> | |
| 121 | ······</td> | 78 | ······</td> |
| 122 | ······<td·xml:lang="en-US"> | 79 | ······<td·xml:lang="en-US"> |
| 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 124 | system·security. | 81 | system·security. |
| 125 | ······</td> | 82 | ······</td> |
| 126 | ····</tr> | 83 | ····</tr> |
| 127 | ····<tr> | 84 | ····<tr> |
| 128 | ······<td>3.1.1<br/>3.1.5</td> | 85 | ······<td>3.1.1<br/>3.1.5</td> |
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 147 | ······<td>Verify·Only·Root·Has·UID·0</td> | 86 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 148 | ······<td·xml:lang="en-US"> | 87 | ······<td·xml:lang="en-US"> |
| 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 88 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | 89 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have |
| 151 | their·UID·changed. | 90 | their·UID·changed. |
| 152 | <br·/> | 91 | <br·/> |
| 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | 92 | If·the·account·is·associated·with·system·commands·or·applications·the·UID |
| Offset 188, 14 lines modified | Offset 125, 77 lines modified | ||
| 188 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | 125 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance |
| 189 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | 126 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of |
| 190 | misconfiguration·elsewhere. | 127 | misconfiguration·elsewhere. |
| 191 | ······</td> | 128 | ······</td> |
| 192 | ····</tr> | 129 | ····</tr> |
| 193 | ····<tr> | 130 | ····<tr> |
| 194 | ······<td>3.1.1<br/>3.1.5</td> | 131 | ······<td>3.1.1<br/>3.1.5</td> |
| 132 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········If·an·account·is·configured·for·password·authentication | ||
| 135 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 136 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 137 | <tt>nullok</tt>·in | ||
| 138 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| Max diff block lines reached; 458772/466780 bytes (98.28%) of diff not shown. | |||
| Offset 1, 38 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·7 | 2 | Oracle·Linux·7 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 13 | ·······································7's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 14 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 15 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 16 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 17 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 18 | ·······································following·command:·····································Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 21 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 22 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 23 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 24 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 25 | ·······································vc/3···················································actions·taken·on·the | ||
| 26 | ·······································vc/4···················································system·using·the | ||
| 27 | ······························································································root·account. | ||
| 28 | ······························································································Even·though·the | 3 | ······························································································Even·though·the |
| 29 | ······························································································communications | 4 | ······························································································communications |
| 30 | ······························································································channel·may·be | 5 | ······························································································channel·may·be |
| 31 | ······························································································encrypted,·an | 6 | ······························································································encrypted,·an |
| 32 | ······························································································additional·layer·of | 7 | ······························································································additional·layer·of |
| 33 | ······························································································security·is·gained | 8 | ······························································································security·is·gained |
| 34 | ······························································································by·extending·the | 9 | ······························································································by·extending·the |
| Offset 47, 34 lines modified | Offset 22, 23 lines modified | ||
| 47 | ······························································································actions·performed·on | 22 | ······························································································actions·performed·on |
| 48 | ······························································································the·system·and·also | 23 | ······························································································the·system·and·also |
| 49 | ······························································································helps·to·minimize | 24 | ······························································································helps·to·minimize |
| 50 | ······························································································direct·attack | 25 | ······························································································direct·attack |
| 51 | ······························································································attempts·on·root's | 26 | ······························································································attempts·on·root's |
| 52 | ······························································································password. | 27 | ······························································································password. |
| 53 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 54 | ·······································automatically·login·without·user·interaction·or | ||
| 55 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 56 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 57 | 29 | ·······································login·without·credentials·which·can·be·useful·for | |
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 58 | ······································· | 33 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts |
| 59 | ······································· | 34 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system |
| 60 | ······································· | 35 | ·······································etc/gdm/custom.conf.·For·example:······················security. |
| 61 | ·······································[daemon] | 36 | ·······································[daemon] |
| 62 | ······································· | 37 | ·······································TimedLoginEnable=false |
| 63 | ······························································································If·an·account·has·an | ||
| 64 | ······························································································empty·password, | ||
| 65 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 66 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 67 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 68 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 69 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 70 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 71 | ······························································································never·be·used·in | ||
| 72 | ······························································································operational | ||
| 73 | ······························································································environments. | ||
| 74 | ······························································································An·account·has·root | 38 | ······························································································An·account·has·root |
| 75 | ······························································································authority·if·it·has | 39 | ······························································································authority·if·it·has |
| 76 | ······························································································a·UID·of·0.·Multiple | 40 | ······························································································a·UID·of·0.·Multiple |
| 77 | ······························································································accounts·with·a·UID | 41 | ······························································································accounts·with·a·UID |
| 78 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 42 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 79 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 43 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 80 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 44 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 97, 104 lines modified | Offset 61, 129 lines modified | ||
| 97 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login | 61 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login |
| 98 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require | 62 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require |
| 99 | ·······································PermitEmptyPasswords·no································a·password,·even·in | 63 | ·······································PermitEmptyPasswords·no································a·password,·even·in |
| 100 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of | 64 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of |
| 101 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration | 65 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration |
| 102 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. | 66 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. |
| 103 | ·······································passwords. | 67 | ·······································passwords. |
| 68 | ······························································································If·an·account·has·an | ||
| 69 | ······························································································empty·password, | ||
| 70 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 71 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 72 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 73 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 74 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 75 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 104 | ······························································································ | 76 | ······························································································never·be·used·in |
| 105 | ······························································································ | 77 | ······························································································operational |
| 106 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 107 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 108 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 109 | ·······································ttyS1··················································actions·taken·on·the | ||
| 110 | ······························································································systems·using·the | ||
| 111 | ······························································································ | 78 | ······························································································environments. |
| 112 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 113 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 114 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 115 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 116 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 117 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 118 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 119 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 120 | ·······································[daemon] | ||
| 121 | ·······································TimedLoginEnable=false | ||
| 122 | ······························································································This·prevents | 79 | ······························································································This·prevents |
| 123 | ······························································································attackers·with | 80 | ······························································································attackers·with |
| 124 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | 81 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from |
| 125 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | 82 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing |
| 126 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | 83 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the |
| 127 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | 84 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining |
| 128 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | 85 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such |
| 129 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | 86 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further |
| 130 | ·······································emergency.service.·····································prevented·by | 87 | ·······································emergency.service.·····································prevented·by |
| 131 | ······························································································configuring·the | 88 | ······························································································configuring·the |
| 132 | ······························································································bootloader·password. | 89 | ······························································································bootloader·password. |
| 90 | ·······································To·further·limit·access·to·the·root·account, | ||
| 91 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 92 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 93 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 94 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 95 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| Max diff block lines reached; 800718/818665 bytes (97.81%) of diff not shown. | |||
| Offset 8560, 18 lines modified | Offset 8560, 18 lines modified | ||
| 000216f0:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 000216f0:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021700:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021700:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021710:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021710:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021720:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021720:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021730:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021730:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021740:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021740:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021750:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021750:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021760:·725f·736e·6d70·645f·72 | 00021760:·725f·736e·6d70·645f·7277·5f73·7472·696e··r_snmpd_rw_strin | ||
| 00021770:·673d·6368·616e·6765·6d65·72 | 00021770:·673d·6368·616e·6765·6d65·7277·3c62·722f··g=changemerw<br/ | ||
| 00021780:·3e76·6172·5f73·6e6d·7064·5f72· | 00021780:·3e76·6172·5f73·6e6d·7064·5f72·6f5f·7374··>var_snmpd_ro_st | ||
| 00021790:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021790:·7269·6e67·3d63·6861·6e67·656d·6572·6f3c··ring=changemero< | ||
| 000217a0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 000217a0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 000217b0:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 000217b0:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 000217c0:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 000217c0:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 000217d0:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 000217d0:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 000217e0:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 000217e0:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 000217f0:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 000217f0:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021800:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021800:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2919, 16 lines modified | Offset 2919, 16 lines modified | ||
| 2919 | ··············································································network·management | 2919 | ··············································································network·management |
| 2920 | ··············································································protocol·(SNMP) | 2920 | ··············································································protocol·(SNMP) |
| 2921 | ··············································································community·strings | 2921 | ··············································································community·strings |
| 2922 | ··············································································must·be·changed·to | 2922 | ··············································································must·be·changed·to |
| 2923 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2923 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2924 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2924 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2925 | ··································private.·This·profile·configures·new·read-··running·with·the | 2925 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2926 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2926 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_rw_string=changemerw |
| 2927 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2927 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_ro_string=changemero |
| 2928 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2928 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2929 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2929 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2930 | ··································$·sudo·systemctl·restart·snmpd··············the·system·and·the | 2930 | ··································$·sudo·systemctl·restart·snmpd··············the·system·and·the |
| 2931 | ··············································································network·and·use·the | 2931 | ··············································································network·and·use·the |
| 2932 | ··············································································information·to | 2932 | ··············································································information·to |
| 2933 | ··············································································potentially | 2933 | ··············································································potentially |
| 2934 | ··············································································compromise·the | 2934 | ··············································································compromise·the |
| Offset 63, 14949 lines modified | Offset 63, 14949 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (977 lines added, 977 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2861·293c·2f74·643e·0a20·2020·2020··-2(a)</td>.····· | ||
| 00000460:· | 00000460:·203c·7464·3e43·6f6e·6669·6775·7265·2061···<td>Configure·a | ||
| 00000470:·7 | 00000470:·7564·6974·696e·6720·6f66·2075·6e73·7563··uditing·of·unsuc | ||
| 00000480:· | 00000480:·6365·7373·6675·6c20·6f77·6e65·7273·6869··cessful·ownershi | ||
| 00000490:· | 00000490:·7020·6368·616e·6765·733c·2f74·643e·0a20··p·changes</td>.· | ||
| 000004a0:·20 | 000004a0:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 000004b0:·7 | 000004b0:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 000004c0:· | 000004c0:·2020·2045·6e73·7572·6520·7468·6174·2075·····Ensure·that·u | ||
| 000004d0:· | 000004d0:·6e73·7563·6365·7373·6675·6c20·6174·7465··nsuccessful·atte | ||
| 000004e0:· | 000004e0:·6d70·7473·2074·6f20·6368·616e·6765·2061··mpts·to·change·a | ||
| 000004f0:·6 | 000004f0:·6e20·6f77·6e65·7273·6869·7020·6f66·2066··n·ownership·of·f | ||
| 00000500:· | 00000500:·696c·6573·206f·7220·6469·7265·6374·6f72··iles·or·director | ||
| 00000510:· | 00000510:·6965·7320·6172·6520·6175·6469·7465·642e··ies·are·audited. | ||
| 00000520:· | 00000520:·0a0a·5468·6520·666f·6c6c·6f77·696e·6720··..The·following· | ||
| 00000530:· | 00000530:·7275·6c65·7320·636f·6e66·6967·7572·6520··rules·configure· | ||
| 00000540:·6 | 00000540:·6175·6469·7420·6173·2064·6573·6372·6962··audit·as·describ | ||
| 00000550:·6 | 00000550:·6564·2061·626f·7665·3a0a·3c70·7265·3e23··ed·above:.<pre># | ||
| 00000560:·2 | 00000560:·2320·556e·7375·6363·6573·7366·756c·206f··#·Unsuccessful·o | ||
| 00000570:· | 00000570:·776e·6572·7368·6970·2063·6861·6e67·650a··wnership·change. | ||
| 00000580:· | 00000580:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000590:· | 00000590:·4620·6172·6368·3d62·3332·202d·5320·6c63··F·arch=b32·-S·lc | ||
| 000005a0:· | 000005a0:·686f·776e·2c66·6368·6f77·6e2c·6368·6f77··hown,fchown,chow | ||
| 000005b0:·6e | 000005b0:·6e2c·6663·686f·776e·6174·202d·4620·6578··n,fchownat·-F·ex | ||
| 000005c0:· | 000005c0:·6974·3d2d·4541·4343·4553·202d·4620·6175··it=-EACCES·-F·au | ||
| 000005d0:· | 000005d0:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 000005e0:· | 000005e0:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000005f0:· | 000005f0:·793d·756e·7375·6363·6573·7366·756c·2d6f··y=unsuccessful-o | ||
| 00000600:· | 00000600:·776e·6572·2d63·6861·6e67·650a·2d61·2061··wner-change.-a·a | ||
| 00000610:·6 | 00000610:·6c77·6179·732c·6578·6974·202d·4620·6172··lways,exit·-F·ar | ||
| 00000620:· | 00000620:·6368·3d62·3634·202d·5320·6c63·686f·776e··ch=b64·-S·lchown | ||
| 00000630:· | 00000630:·2c66·6368·6f77·6e2c·6368·6f77·6e2c·6663··,fchown,chown,fc | ||
| 00000640:· | 00000640:·686f·776e·6174·202d·4620·6578·6974·3d2d··hownat·-F·exit=- | ||
| 00000650:· | 00000650:·4541·4343·4553·202d·4620·6175·6964·2667··EACCES·-F·auid&g | ||
| 00000660:· | 00000660:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 00000670:·3 | 00000670:·3d75·6e73·6574·202d·4620·6b65·793d·756e··=unset·-F·key=un | ||
| 00000680:· | 00000680:·7375·6363·6573·7366·756c·2d6f·776e·6572··successful-owner | ||
| 00000690:· | 00000690:·2d63·6861·6e67·650a·2d61·2061·6c77·6179··-change.-a·alway | ||
| 000006a0:·73 | 000006a0:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000006b0:· | 000006b0:·3332·202d·5320·6c63·686f·776e·2c66·6368··32·-S·lchown,fch | ||
| 000006c0:· | 000006c0:·6f77·6e2c·6368·6f77·6e2c·6663·686f·776e··own,chown,fchown | ||
| 000006d0:·642 | 000006d0:·6174·202d·4620·6578·6974·3d2d·4550·4552··at·-F·exit=-EPER | ||
| 000006e0:· | 000006e0:·4d20·2d46·2061·7569·6426·6774·3b3d·3130··M·-F·auid>=10 | ||
| 000006f0:· | 000006f0:·3030·202d·4620·6175·6964·213d·756e·7365··00·-F·auid!=unse | ||
| 00000700:·74 | 00000700:·7420·2d46·206b·6579·3d75·6e73·7563·6365··t·-F·key=unsucce | ||
| 00000710:·73 | 00000710:·7373·6675·6c2d·6f77·6e65·722d·6368·616e··ssful-owner-chan | ||
| 00000720:· | 00000720:·6765·0a2d·6120·616c·7761·7973·2c65·7869··ge.-a·always,exi | ||
| 00000730:·74 | 00000730:·7420·2d46·2061·7263·683d·6236·3420·2d53··t·-F·arch=b64·-S | ||
| 00000740:· | 00000740:·206c·6368·6f77·6e2c·6663·686f·776e·2c63···lchown,fchown,c | ||
| 00000750:· | 00000750:·686f·776e·2c66·6368·6f77·6e61·7420·2d46··hown,fchownat·-F | ||
| 00000760:· | 00000760:·2065·7869·743d·2d45·5045·524d·202d·4620···exit=-EPERM·-F· | ||
| 00000770:· | 00000770:·6175·6964·2667·743b·3d31·3030·3020·2d46··auid>=1000·-F | ||
| 00000780:· | 00000780:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 00000790:· | 00000790:·6b65·793d·756e·7375·6363·6573·7366·756c··key=unsuccessful | ||
| 000007a0:· | 000007a0:·2d6f·776e·6572·2d63·6861·6e67·6520·2020··-owner-change··· | ||
| 000007b0:· | 000007b0:·203c·2f70·7265·3e0a·0a4c·6f61·6420·6e65···</pre>..Load·ne | ||
| 000007c0:·2 | 000007c0:·7720·4175·6469·7420·7275·6c65·7320·696e··w·Audit·rules·in | ||
| 000007d0:·7 | 000007d0:·746f·206b·6572·6e65·6c20·6279·2072·756e··to·kernel·by·run | ||
| 000007e0:· | 000007e0:·6e69·6e67·3a0a·3c70·7265·3e61·7567·656e··ning:.<pre>augen | ||
| 000007f0:· | 000007f0:·7275·6c65·7320·2d2d·6c6f·6164·3c2f·7072··rules·--load</pr | ||
| 00000800:· | 00000800:·653e·0a0a·4e6f·7465·3a20·5468·6973·2072··e>..Note:·This·r | ||
| 00000810:· | 00000810:·756c·6520·7573·6573·2061·2073·7065·6369··ule·uses·a·speci | ||
| 00000820:· | 00000820:·616c·2073·6574·206f·6620·4175·6469·7420··al·set·of·Audit· | ||
| 00000830:· | 00000830:·7275·6c65·7320·746f·2063·6f6d·706c·7920··rules·to·comply· | ||
| 00000840:· | 00000840:·7769·7468·204f·5350·5020·342e·322e·312e··with·OSPP·4.2.1. | ||
| 00000850:·2 | 00000850:·2059·6f75·206d·6179·2072·6575·7365·2074···You·may·reuse·t | ||
| 00000860:· | 00000860:·6869·7320·7275·6c65·2069·6e20·6469·6666··his·rule·in·diff | ||
| 00000870:·6 | 00000870:·6572·656e·7420·7072·6f66·696c·6573·2e20··erent·profiles.· | ||
| 00000880:· | 00000880:·4966·2079·6f75·2064·6563·6964·6520·746f··If·you·decide·to | ||
| 00000890:· | 00000890:·2064·6f20·736f·2c20·6974·2069·7320·7265···do·so,·it·is·re | ||
| 000008a0:· | 000008a0:·636f·6d6d·656e·6465·6420·7468·6174·2079··commended·that·y | ||
| 000008b0:·6f7 | 000008b0:·6f75·2069·6e73·7065·6374·2063·6f6e·7465··ou·inspect·conte | ||
| 000008c0:· | 000008c0:·6e74·7320·6f66·2074·6865·2066·696c·6520··nts·of·the·file· | ||
| 000008d0:· | 000008d0:·636c·6f73·656c·7920·616e·6420·6d61·6b65··closely·and·make | ||
| 000008e0:· | 000008e0:·2073·7572·6520·7468·6174·2074·6865·7920···sure·that·they· | ||
| 000008f0:·7 | 000008f0:·6172·6520·616c·6c69·676e·6564·2077·6974··are·alligned·wit | ||
| 00000900:·6 | 00000900:·6820·796f·7572·206e·6565·6473·2e0a·2020··h·your·needs..·· | ||
| 00000910:· | 00000910:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 00000920:· | 00000920:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000930:· | 00000930:·2d55·5322·3e0a·2020·2020·2020·2020·556e··-US">.········Un | ||
| 00000940:· | 00000940:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000950:· | 00000950:·7074·7320·746f·2063·6861·6e67·6520·616e··pts·to·change·an | ||
| 00000960:· | 00000960:·206f·776e·6572·7368·6970·206f·6620·6669···ownership·of·fi | ||
| 00000970:·6 | 00000970:·6c65·7320·6f72·2064·6972·6563·746f·7269··les·or·directori | ||
| 00000980:·65 | 00000980:·6573·206d·6967·6874·2062·6520·7369·676e··es·might·be·sign | ||
| 00000990:·7320·6f6 | 00000990:·7320·6f66·2061·206d·616c·6963·696f·7573··s·of·a·malicious | ||
| 000009a0:· | 000009a0:·2061·6374·6976·6974·792e·2048·6176·696e···activity.·Havin | ||
| 000009b0:·6 | 000009b0:·6720·7375·6368·2065·7665·6e74·7320·6175··g·such·events·au | ||
| 000009c0:· | 000009c0:·6469·7465·6420·6865·6c70·7320·696e·206d··dited·helps·in·m | ||
| 000009d0:·6 | 000009d0:·6f6e·6974·6f72·696e·6720·616e·6420·696e··onitoring·and·in | ||
| 000009e0:·7 | 000009e0:·7665·7374·6967·6174·696f·6e20·6f66·2073··vestigation·of·s | ||
| 000009f0:·7 | 000009f0:·7563·6820·6163·7469·7669·7469·6573·2e0a··uch·activities.. | ||
| 00000a00:· | 00000a00:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | ||
| 00000a10:· | 00000a10:·3c2f·7472·3e0a·2020·2020·3c74·723e·0a20··</tr>.····<tr>.· | ||
| 00000a20:·20 | 00000a20:·2020·2020·203c·7464·3e41·552d·3228·6129·······<td>AU-2(a) | ||
| 00000a30:· | 00000a30:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 00000a40:· | 00000a40:·436f·6e66·6967·7572·6520·6175·6469·7469··Configure·auditi | ||
| 00000a50:· | 00000a50:·6e67·206f·6620·756e·7375·6363·6573·7366··ng·of·unsuccessf | ||
| 00000a60:· | 00000a60:·756c·2066·696c·6520·6372·6561·7469·6f6e··ul·file·creation | ||
| 00000a70:· | 00000a70:·7320·2841·4172·6368·3634·293c·2f74·643e··s·(AArch64)</td> | ||
| 00000a80:· | 00000a80:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000a90:·6 | 00000a90:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000aa0:· | 00000aa0:·2020·2020·2045·6e73·7572·6520·7468·6174·······Ensure·that | ||
| 00000ab0:· | 00000ab0:·2075·6e73·7563·6365·7373·6675·6c20·6174···unsuccessful·at | ||
| 00000ac0:· | 00000ac0:·7465·6d70·7473·2074·6f20·6372·6561·7465··tempts·to·create | ||
| 00000ad0:· | 00000ad0:·2061·2066·696c·6520·6172·6520·6175·6469···a·file·are·audi | ||
| 00000ae0:·7 | 00000ae0:·7465·642e·0a0a·5468·6520·666f·6c6c·6f77··ted...The·follow | ||
| 00000af0:· | 00000af0:·696e·6720·7275·6c65·7320·636f·6e66·6967··ing·rules·config | ||
| 00000b00:· | 00000b00:·7572·6520·6175·6469·7420·6173·2064·6573··ure·audit·as·des | ||
| 00000b10:· | 00000b10:·6372·6962·6564·2061·626f·7665·3a0a·3c70··cribed·above:.<p | ||
| 00000b20:· | 00000b20:·7265·3e23·2320·556e·7375·6363·6573·7366··re>##·Unsuccessf | ||
| 00000b30:· | 00000b30:·756c·2066·696c·6520·6372·6561·7469·6f6e··ul·file·creation | ||
| 00000b40:·202 | 00000b40:·2028·6f70·656e·2077·6974·6820·4f5f·4352···(open·with·O_CR | ||
| 00000b50:· | 00000b50:·4541·5429·0a2d·6120·616c·7761·7973·2c65··EAT).-a·always,e | ||
| 00000b60:·7 | 00000b60:·7869·7420·2d46·2061·7263·683d·6233·3220··xit·-F·arch=b32· | ||
| 00000b70:· | 00000b70:·2d53·206f·7065·6e61·742c·6f70·656e·5f62··-S·openat,open_b | ||
| 00000b80:· | 00000b80:·795f·6861·6e64·6c65·5f61·7420·2d46·2061··y_handle_at·-F·a | ||
| 00000b90:· | 00000b90:·3226·616d·703b·3031·3030·202d·4620·6578··2&0100·-F·ex | ||
| 00000ba0:· | 00000ba0:·6974·3d2d·4541·4343·4553·202d·4620·6175··it=-EACCES·-F·au | ||
| 00000bb0:· | 00000bb0:·6964·3e3d·3130·3030·202d·4620·6175·6964··id>=1000·-F·auid | ||
| Max diff block lines reached; 7284730/7420134 bytes (98.18%) of diff not shown. | |||
| Offset 75, 33 lines modified | Offset 75, 14 lines modified | ||
| 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify | 75 | package,·or·the·SCAP·Workbench·GUI·tool·from·the·<tt>scap-workbench</tt>·package,·to·verify |
| 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual | 76 | that·the·system·conforms·to·provided·guidelines.·Refer·to·the·scap-security-guide(8)·manual |
| 77 | page·for·futher·information. | 77 | page·for·futher·information. |
| 78 | ······</td> | 78 | ······</td> |
| 79 | ····</tr> | 79 | ····</tr> |
| 80 | ····<tr> | 80 | ····<tr> |
| 81 | ······<td>AVA_VAN.1</td> | 81 | ······<td>AVA_VAN.1</td> |
| 82 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation·in·zIPL</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before | ||
| 85 | allocation,·check·that·all·boot·entries·in | ||
| 86 | <tt>/boot/loader/entries/*.conf</tt>·have·<tt>init_on_alloc=1</tt> | ||
| 87 | included·in·its·options.<br·/> | ||
| 88 | To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory | ||
| 89 | before·allocation,·add·<tt>init_on_alloc=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 90 | ······</td> | ||
| 91 | ······<td·xml:lang="en-US"> | ||
| 92 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 93 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 94 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 95 | preventing·data·leaks. | ||
| 96 | ······</td> | ||
| 97 | ····</tr> | ||
| 98 | ····<tr> | ||
| 99 | ······<td>AVA_VAN.1</td> | ||
| 100 | ······<td>Enable·randomization·of·the·page·allocator·in·zIPL</td> | 82 | ······<td>Enable·randomization·of·the·page·allocator·in·zIPL</td> |
| 101 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 102 | ········To·enable·the·randomization·of·the·page·allocator·in·the·kernel,·check·that | 84 | ········To·enable·the·randomization·of·the·page·allocator·in·the·kernel,·check·that |
| 103 | all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have | 85 | all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have |
| 104 | <tt>page_alloc.shuffle=1</tt>·included·in·its·options.<br·/> | 86 | <tt>page_alloc.shuffle=1</tt>·included·in·its·options.<br·/> |
| 105 | To·enable·randomization·of·the·page·allocator·also·for··newly·installed | 87 | To·enable·randomization·of·the·page·allocator·also·for··newly·installed |
| Offset 118, 34 lines modified | Offset 99, 14 lines modified | ||
| 118 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | 99 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command |
| 119 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | 100 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache |
| 120 | architecture. | 101 | architecture. |
| 121 | ······</td> | 102 | ······</td> |
| 122 | ····</tr> | 103 | ····</tr> |
| 123 | ····<tr> | 104 | ····<tr> |
| 124 | ······<td>AVA_VAN.1</td> | 105 | ······<td>AVA_VAN.1</td> |
| 125 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation</td> | ||
| 126 | ······<td·xml:lang="en-US"> | ||
| 127 | ········To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the | ||
| 128 | <tt>init_on_alloc=1</tt>·argument·to·the·default·GRUB·2·command·line. | ||
| 129 | To·ensure·that·<tt>init_on_alloc=1</tt>·is·added·as·a·kernel·command·line | ||
| 130 | argument·to·newly·installed·kernels,·add·<tt>init_on_alloc=1</tt>·to·the | ||
| 131 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 132 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 133 | <pre>GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."</pre> | ||
| 134 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"</pre> | ||
| 135 | ······</td> | ||
| 136 | ······<td·xml:lang="en-US"> | ||
| 137 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 138 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 139 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 140 | preventing·data·leaks. | ||
| 141 | ······</td> | ||
| 142 | ····</tr> | ||
| 143 | ····<tr> | ||
| 144 | ······<td>AVA_VAN.1</td> | ||
| 145 | ······<td>Enable·randomization·of·the·page·allocator</td> | 106 | ······<td>Enable·randomization·of·the·page·allocator</td> |
| 146 | ······<td·xml:lang="en-US"> | 107 | ······<td·xml:lang="en-US"> |
| 147 | ········To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the | 108 | ········To·enable·randomization·of·the·page·allocator·in·the·kernel,·add·the |
| 148 | <tt>page_alloc.shuffle=1</tt>·argument·to·the·default·GRUB·2·command·line. | 109 | <tt>page_alloc.shuffle=1</tt>·argument·to·the·default·GRUB·2·command·line. |
| 149 | To·ensure·that·<tt>page_alloc.shuffle=1</tt>·is·added·as·a·kernel·command·line | 110 | To·ensure·that·<tt>page_alloc.shuffle=1</tt>·is·added·as·a·kernel·command·line |
| 150 | argument·to·newly·installed·kernels,·add·<tt>page_alloc.shuffle=1</tt>·to·the | 111 | argument·to·newly·installed·kernels,·add·<tt>page_alloc.shuffle=1</tt>·to·the |
| 151 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | 112 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within |
| Offset 163, 27 lines modified | Offset 124, 50 lines modified | ||
| 163 | hot-pluggable·memory·node·(as·in·NUMA·node)·and·applications·allocating | 124 | hot-pluggable·memory·node·(as·in·NUMA·node)·and·applications·allocating |
| 164 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command | 125 | memory·ouf·of·that·node.·The·<tt>page_alloc.shuffle=1</tt>·kernel·command |
| 165 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache | 126 | line·parameter·then·forces·this·functionality·irrespectively·of·memory·cache |
| 166 | architecture. | 127 | architecture. |
| 167 | ······</td> | 128 | ······</td> |
| 168 | ····</tr> | 129 | ····</tr> |
| 169 | ····<tr> | 130 | ····<tr> |
| 170 | ······<td> | 131 | ······<td>AVA_VAN.1</td> |
| 171 | ······<td>Configure· | 132 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation</td> |
| 172 | ······<td·xml:lang="en-US"> | 133 | ······<td·xml:lang="en-US"> |
| 173 | ········The·<tt>auditd</tt>·service·can·be·configured·to | ||
| 174 | synchronously·write·audit·event·data·to·disk.·Add·or·correct·the·following | ||
| 175 | line·in·<tt>/etc/audit/auditd.conf</tt>·to·ensure·that·audit·event·data·is | ||
| 176 | fully·synchronized·with·the·log·files·on·the·disk: | ||
| 177 | 134 | ········To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the | |
| 135 | <tt>init_on_alloc=1</tt>·argument·to·the·default·GRUB·2·command·line. | ||
| 136 | To·ensure·that·<tt>init_on_alloc=1</tt>·is·added·as·a·kernel·command·line | ||
| 137 | argument·to·newly·installed·kernels,·add·<tt>init_on_alloc=1</tt>·to·the | ||
| 138 | default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within | ||
| 139 | <tt>/etc/default/grub</tt>·as·shown·below: | ||
| 140 | <pre>GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."</pre> | ||
| 141 | Run·the·following·command·to·update·command·line·for·already·installed·kernels:<pre>#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"</pre> | ||
| 178 | ······</td> | 142 | ······</td> |
| 179 | ······<td·xml:lang="en-US"> | 143 | ······<td·xml:lang="en-US"> |
| 180 | ········Audit·data·should·be·synchronously·written·to·disk·to·ensure | ||
| 181 | log·integrity.·These·parameters·assure·that·all·audit·event·data·is·fully | ||
| 182 | 144 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | |
| 145 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 146 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 147 | preventing·data·leaks. | ||
| 148 | ······</td> | ||
| 149 | ····</tr> | ||
| 150 | ····<tr> | ||
| 151 | ······<td>AVA_VAN.1</td> | ||
| 152 | ······<td>Configure·kernel·to·zero·out·memory·before·allocation·in·zIPL</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before | ||
| 155 | allocation,·check·that·all·boot·entries·in | ||
| 156 | <tt>/boot/loader/entries/*.conf</tt>·have·<tt>init_on_alloc=1</tt> | ||
| 157 | included·in·its·options.<br·/> | ||
| 158 | To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory | ||
| 159 | before·allocation,·add·<tt>init_on_alloc=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 160 | ······</td> | ||
| 161 | ······<td·xml:lang="en-US"> | ||
| 162 | ········When·the·kernel·configuration·option·<tt>init_on_alloc</tt>·is·enabled, | ||
| 163 | all·page·allocator·and·slab·allocator·memory·will·be·zeroed·when·allocated, | ||
| 164 | eliminating·many·kinds·of·"uninitialized·heap·memory"·flaws,·effectively | ||
| 165 | preventing·data·leaks. | ||
| 183 | ······</td> | 166 | ······</td> |
| 184 | ····</tr> | 167 | ····</tr> |
| 185 | ····<tr> | 168 | ····<tr> |
| 186 | ······<td>FAU_GEN.1</td> | 169 | ······<td>FAU_GEN.1</td> |
| 187 | ······<td>Disable·SSH·Root·Login</td> | 170 | ······<td>Disable·SSH·Root·Login</td> |
| 188 | ······<td·xml:lang="en-US"> | 171 | ······<td·xml:lang="en-US"> |
| 189 | ········The·root·user·should·never·be·allowed·to·login·to·a | 172 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| Offset 201, 36 lines modified | Offset 185, 14 lines modified | ||
| 201 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 185 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| Max diff block lines reached; 241123/247608 bytes (97.38%) of diff not shown. | |||
| Offset 34, 23 lines modified | Offset 34, 14 lines modified | ||
| 34 | ·························································································································the·SCAP·Workbench·GUI·tool | 34 | ·························································································································the·SCAP·Workbench·GUI·tool |
| 35 | ·························································································································from·the·scap-workbench | 35 | ·························································································································from·the·scap-workbench |
| 36 | ·························································································································package,·to·verify·that·the | 36 | ·························································································································package,·to·verify·that·the |
| 37 | ·························································································································system·conforms·to·provided | 37 | ·························································································································system·conforms·to·provided |
| 38 | ·························································································································guidelines.·Refer·to·the | 38 | ·························································································································guidelines.·Refer·to·the |
| 39 | ·························································································································scap-security-guide(8)·manual | 39 | ·························································································································scap-security-guide(8)·manual |
| 40 | ·························································································································page·for·futher·information. | 40 | ·························································································································page·for·futher·information. |
| 41 | ·························································································································When·the·kernel·configuration | ||
| 42 | ·················Configure·······························································································option·init_on_alloc·is | ||
| 43 | ·················kernel·to·zero·To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before·allocation,·check·that·enabled,·all·page·allocator | ||
| 44 | ·················out·memory·····all·boot·entries·in·/boot/loader/entries/*.conf·have·init_on_alloc=1·included·in·its·····and·slab·allocator·memory | ||
| 45 | AVA_VAN.1········before·········options.·················································································will·be·zeroed·when | ||
| 46 | ·················allocation·in··To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory·before···········allocated,·eliminating·many | ||
| 47 | ·················zIPL···········allocation,·add·init_on_alloc=1·to·/etc/kernel/cmdline.··································kinds·of·"uninitialized·heap | ||
| 48 | ·························································································································memory"·flaws,·effectively | ||
| 49 | ·························································································································preventing·data·leaks. | ||
| 50 | ·························································································································The | 41 | ·························································································································The |
| 51 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR | 42 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR |
| 52 | ·························································································································config·option·is·primarily | 43 | ·························································································································config·option·is·primarily |
| 53 | ·························································································································focused·on·improving·the | 44 | ·························································································································focused·on·improving·the |
| 54 | ·························································································································average·utilization·of·a | 45 | ·························································································································average·utilization·of·a |
| 55 | ·························································································································direct-mapped·memory-side- | 46 | ·························································································································direct-mapped·memory-side- |
| 56 | ·························································································································cache.·Aside·of·this | 47 | ·························································································································cache.·Aside·of·this |
| Offset 68, 23 lines modified | Offset 59, 14 lines modified | ||
| 68 | ·························································································································applications·allocating | 59 | ·························································································································applications·allocating |
| 69 | ·························································································································memory·ouf·of·that·node.·The | 60 | ·························································································································memory·ouf·of·that·node.·The |
| 70 | ·························································································································page_alloc.shuffle=1·kernel | 61 | ·························································································································page_alloc.shuffle=1·kernel |
| 71 | ·························································································································command·line·parameter·then | 62 | ·························································································································command·line·parameter·then |
| 72 | ·························································································································forces·this·functionality | 63 | ·························································································································forces·this·functionality |
| 73 | ·························································································································irrespectively·of·memory | 64 | ·························································································································irrespectively·of·memory |
| 74 | ·························································································································cache·architecture. | 65 | ·························································································································cache·architecture. |
| 75 | ································To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the·init_on_alloc=1·When·the·kernel·configuration | ||
| 76 | ································argument·to·the·default·GRUB·2·command·line.·To·ensure·that·init_on_alloc=1·is·added·as··option·init_on_alloc·is | ||
| 77 | ·················Configure······a·kernel·command·line·argument·to·newly·installed·kernels,·add·init_on_alloc=1·to·the····enabled,·all·page·allocator | ||
| 78 | ·················kernel·to·zero·default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within·/etc/·····and·slab·allocator·memory | ||
| 79 | AVA_VAN.1········out·memory·····default/grub·as·shown·below:·····························································will·be·zeroed·when | ||
| 80 | ·················before·········GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."·············································allocated,·eliminating·many | ||
| 81 | ·················allocation·····Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········kinds·of·"uninitialized·heap | ||
| 82 | ································#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"····································memory"·flaws,·effectively | ||
| 83 | ·························································································································preventing·data·leaks. | ||
| 84 | ·························································································································The | 66 | ·························································································································The |
| 85 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR | 67 | ·························································································································CONFIG_SHUFFLE_PAGE_ALLOCATOR |
| 86 | ·························································································································config·option·is·primarily | 68 | ·························································································································config·option·is·primarily |
| 87 | ·························································································································focused·on·improving·the | 69 | ·························································································································focused·on·improving·the |
| 88 | ·························································································································average·utilization·of·a | 70 | ·························································································································average·utilization·of·a |
| 89 | ·························································································································direct-mapped·memory-side- | 71 | ·························································································································direct-mapped·memory-side- |
| 90 | ·························································································································cache.·Aside·of·this | 72 | ·························································································································cache.·Aside·of·this |
| Offset 102, 145 lines modified | Offset 84, 178 lines modified | ||
| 102 | ·························································································································applications·allocating | 84 | ·························································································································applications·allocating |
| 103 | ·························································································································memory·ouf·of·that·node.·The | 85 | ·························································································································memory·ouf·of·that·node.·The |
| 104 | ·························································································································page_alloc.shuffle=1·kernel | 86 | ·························································································································page_alloc.shuffle=1·kernel |
| 105 | ·························································································································command·line·parameter·then | 87 | ·························································································································command·line·parameter·then |
| 106 | ·························································································································forces·this·functionality | 88 | ·························································································································forces·this·functionality |
| 107 | ·························································································································irrespectively·of·memory | 89 | ·························································································································irrespectively·of·memory |
| 108 | ·························································································································cache·architecture. | 90 | ·························································································································cache·architecture. |
| 91 | ································To·configure·the·kernel·to·zero·out·memory·before·allocating·it,·add·the·init_on_alloc=1·When·the·kernel·configuration | ||
| 92 | ································argument·to·the·default·GRUB·2·command·line.·To·ensure·that·init_on_alloc=1·is·added·as··option·init_on_alloc·is | ||
| 93 | ·················Configure······a·kernel·command·line·argument·to·newly·installed·kernels,·add·init_on_alloc=1·to·the····enabled,·all·page·allocator | ||
| 94 | ·················kernel·to·zero·default·Grub2·command·line·for·Linux·operating·systems.·Modify·the·line·within·/etc/·····and·slab·allocator·memory | ||
| 95 | AVA_VAN.1········out·memory·····default/grub·as·shown·below:·····························································will·be·zeroed·when | ||
| 96 | ·················before·········GRUB_CMDLINE_LINUX="...·init_on_alloc=1·..."·············································allocated,·eliminating·many | ||
| 97 | ·················allocation·····Run·the·following·command·to·update·command·line·for·already·installed·kernels:··········kinds·of·"uninitialized·heap | ||
| 98 | ································#·grubby·--update-kernel=ALL·--args="init_on_alloc=1"····································memory"·flaws,·effectively | ||
| 109 | ························································································································· | 99 | ·························································································································preventing·data·leaks. |
| 110 | ································The·auditd·service·can·be·configured·to·synchronously·write·audit·event·data·to·disk.····synchronously·written·to·disk | ||
| 111 | ·················Configure······Add·or·correct·the·following·line·in·/etc/audit/auditd.conf·to·ensure·that·audit·event···to·ensure·log·integrity. | ||
| 112 | FAU_GEN.1········auditd·flush···data·is·fully·synchronized·with·the·log·files·on·the·disk:·······························These·parameters·assure·that | ||
| 113 | ·················priority·······flush·=·data·············································································all·audit·event·data·is·fully | ||
| 114 | ························································································································· | 100 | ·························································································································When·the·kernel·configuration |
| 101 | ·················Configure·······························································································option·init_on_alloc·is | ||
| 102 | ·················kernel·to·zero·To·ensure·that·the·kernel·is·configured·to·zero·out·memory·before·allocation,·check·that·enabled,·all·page·allocator | ||
| 103 | ·················out·memory·····all·boot·entries·in·/boot/loader/entries/*.conf·have·init_on_alloc=1·included·in·its·····and·slab·allocator·memory | ||
| 104 | AVA_VAN.1········before·········options.·················································································will·be·zeroed·when | ||
| 105 | ·················allocation·in··To·ensure·that·new·kernels·and·boot·entries·continue·to·zero·out·memory·before···········allocated,·eliminating·many | ||
| 106 | ·················zIPL···········allocation,·add·init_on_alloc=1·to·/etc/kernel/cmdline.··································kinds·of·"uninitialized·heap | ||
| 107 | ·························································································································memory"·flaws,·effectively | ||
| 115 | ························································································································· | 108 | ·························································································································preventing·data·leaks. |
| 116 | ·························································································································Even·though·the | 109 | ·························································································································Even·though·the |
| 117 | ·························································································································communications·channel·may·be | 110 | ·························································································································communications·channel·may·be |
| 118 | ·························································································································encrypted,·an·additional | 111 | ·························································································································encrypted,·an·additional |
| 119 | ·························································································································layer·of·security·is·gained | 112 | ·························································································································layer·of·security·is·gained |
| 120 | ·························································································································by·extending·the·policy·of | 113 | ·························································································································by·extending·the·policy·of |
| 121 | ································The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···not·logging·directly·on·as | 114 | ································The·root·user·should·never·be·allowed·to·login·to·a·system·directly·over·a·network.·To···not·logging·directly·on·as |
| 122 | FAU_GEN.1········Disable·SSH····disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···root.·In·addition,·logging·in | 115 | FAU_GEN.1········Disable·SSH····disable·root·login·via·SSH,·add·or·correct·the·following·line·in·/etc/ssh/sshd_config:···root.·In·addition,·logging·in |
| 123 | ·················Root·Login·····PermitRootLogin·no·······································································with·a·user-specific·account | 116 | ·················Root·Login·····PermitRootLogin·no·······································································with·a·user-specific·account |
| 124 | ·························································································································provides·individual | 117 | ·························································································································provides·individual |
| 125 | ·························································································································accountability·of·actions | 118 | ·························································································································accountability·of·actions |
| 126 | ·························································································································performed·on·the·system·and | 119 | ·························································································································performed·on·the·system·and |
| 127 | ·························································································································also·helps·to·minimize·direct | 120 | ·························································································································also·helps·to·minimize·direct |
| 128 | ·························································································································attack·attempts·on·root's | 121 | ·························································································································attack·attempts·on·root's |
| 129 | ·························································································································password. | 122 | ·························································································································password. |
| 130 | ·························································································································Without·establishing·what | ||
| 131 | ·························································································································type·of·events·occurred,·it | ||
| 132 | ·························································································································would·be·difficult·to | ||
| 133 | ·························································································································establish,·correlate,·and | ||
| 134 | ·························································································································investigate·the·events | ||
| 135 | ·························································································································leading·up·to·an·outage·or | ||
| 136 | ·························································································································attack.·Ensuring·the·auditd | ||
| 137 | ·························································································································service·is·active·ensures | ||
| 138 | ································The·auditd·service·is·an·essential·userspace·component·of·the·Linux·Auditing·System,·as··audit·records·generated·by | ||
| 139 | FAU_GEN.1········Enable·auditd··it·is·responsible·for·writing·audit·records·to·disk.·The·auditd·service·can·be·enabled···the·kernel·are·appropriately | ||
| 140 | ·················Service········with·the·following·command:······························································recorded. | ||
| 141 | ································$·sudo·systemctl·enable·auditd.service | ||
| 142 | ·························································································································Additionally,·a·properly | ||
| 143 | ·························································································································configured·audit·subsystem | ||
| 144 | ·························································································································ensures·that·actions·of | ||
| 145 | ·························································································································individual·system·users·can | ||
| 146 | ·························································································································be·uniquely·traced·to·those | ||
| 147 | ·························································································································users·so·they·can·be·held | ||
| 148 | ·························································································································accountable·for·their | ||
| 149 | ·························································································································actions. | ||
| 150 | ·························································································································Each·process·on·the·system | 123 | ·························································································································Each·process·on·the·system |
| 151 | ·························································································································carries·an·"auditable"·flag | 124 | ·························································································································carries·an·"auditable"·flag |
| 152 | ·························································································································which·indicates·whether·its | 125 | ·························································································································which·indicates·whether·its |
| 153 | ·················Enable·········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be·audited. | 126 | ·················Enable·········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit········activities·can·be·audited. |
| 154 | ·················Auditing·to····daemon,·check·that·all·boot·entries·in·/boot/loader/entries/*.conf·have·audit=1·included·Although·auditd·takes·care·of | 127 | ·················Auditing·to····daemon,·check·that·all·boot·entries·in·/boot/loader/entries/*.conf·have·audit=1·included·Although·auditd·takes·care·of |
| 155 | FAU_GEN.1········Start·Prior·to·in·its·options.··········································································enabling·this·for·all | 128 | FAU_GEN.1········Start·Prior·to·in·its·options.··········································································enabling·this·for·all |
| 156 | ·················the·Audit······To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···processes·which·launch·after | 129 | ·················the·Audit······To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit,·add·audit=1·to·/···processes·which·launch·after |
| 157 | ·················Daemon·in·zIPL·etc/kernel/cmdline.······································································it·does,·adding·the·kernel | 130 | ·················Daemon·in·zIPL·etc/kernel/cmdline.······································································it·does,·adding·the·kernel |
| 158 | ·························································································································argument·ensures·it·is·set | 131 | ·························································································································argument·ensures·it·is·set |
| 159 | ·························································································································for·every·process·during | 132 | ·························································································································for·every·process·during |
| 160 | ·························································································································boot. | 133 | ·························································································································boot. |
| 134 | ································Perform·basic·configuration·of·Audit·system.·Make·sure·that·any·previously·defined·rules | ||
| 135 | ································are·cleared,·the·auditing·system·is·configured·to·handle·sudden·bursts·of·events,·and·in | ||
| 136 | ································cases·of·failure,·messages·are·configured·to·be·directed·to·system·log.·The·following | ||
| 137 | ································rules·configure·audit·as·described·above: | ||
| 138 | ································##·First·rule·-·delete·all | ||
| Max diff block lines reached; 367259/387320 bytes (94.82%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 26 lines modified | Offset 157, 24 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Install·iptables·Package</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | netwo | 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 167 | <pre> | ||
| 168 | $·sudo·yum·install·iptables</pre> | ||
| 169 | ······</td> | 169 | ······</td> |
| 170 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | masquerading,·etc. | ||
| 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 176 | ······</td> | 174 | ······</td> |
| 177 | ····</tr> | 175 | ····</tr> |
| 178 | ····<tr> | 176 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 177 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 181 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| Offset 189, 24 lines modified | Offset 187, 26 lines modified | ||
| 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 191 | enables·the·system·to·continue·servicing·valid·connection·requests. | 189 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 192 | ······</td> | 190 | ······</td> |
| 193 | ····</tr> | 191 | ····</tr> |
| 194 | ····<tr> | 192 | ····<tr> |
| 195 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 196 | ······<td> | 194 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 197 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 199 | <pre> | ||
| 200 | 196 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | network. | ||
| 201 | ······</td> | 199 | ······</td> |
| 202 | ······<td·xml:lang="en-US"> | 200 | ······<td·xml:lang="en-US"> |
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | |
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | anti-spoofing·measure. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 40 lines modified | Offset 246, 23 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| Max diff block lines reached; 296415/302258 bytes (98.07%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 31 lines modified | Offset 112, 23 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 121 | ····················································································p | 119 | ····················································································iptables·controls |
| 122 | ···················································································· | 120 | ····················································································the·Linux·kernel |
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 125 | ····················································································system.·The | ||
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 129 | ····················································································network· | 121 | ····················································································network·packet |
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 130 | ····················································································s | 125 | ····················································································set·up·firewalls |
| 131 | ····················································································other·interfaces | ||
| 132 | ···················································································· | 126 | ····················································································and·IP |
| 133 | ····················································································traffic·on·this | ||
| 134 | ····················································································network·as·an·anti- | ||
| 135 | ····················································································s | 127 | ····················································································masquerading,·etc. |
| 136 | ····················································································A·TCP·SYN·flood | 128 | ····················································································A·TCP·SYN·flood |
| 137 | ····················································································attack·can·cause·a | 129 | ····················································································attack·can·cause·a |
| 138 | ····················································································denial·of·service | 130 | ····················································································denial·of·service |
| 139 | ····················································································by·filling·a | 131 | ····················································································by·filling·a |
| 140 | ····················································································system's·TCP | 132 | ····················································································system's·TCP |
| 141 | ····················································································connection·table | 133 | ····················································································connection·table |
| 142 | ····················································································with·connections·in | 134 | ····················································································with·connections·in |
| Offset 155, 23 lines modified | Offset 147, 31 lines modified | ||
| 155 | ····················································································flood·condition·is | 147 | ····················································································flood·condition·is |
| 156 | ····················································································detected,·and | 148 | ····················································································detected,·and |
| 157 | ····················································································enables·the·system | 149 | ····················································································enables·the·system |
| 158 | ····················································································to·continue | 150 | ····················································································to·continue |
| 159 | ····················································································servicing·valid | 151 | ····················································································servicing·valid |
| 160 | ····················································································connection | 152 | ····················································································connection |
| 161 | ····················································································requests. | 153 | ····················································································requests. |
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 162 | ···················································································· | 156 | ····················································································processes·on |
| 157 | ····················································································machine·and·is | ||
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 163 | ···················································································· | 160 | ····················································································system.·The |
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network· | 164 | ····················································································network·traffic |
| 165 | ····················································································should·be·seen,·all | ||
| 166 | ····················································································other·interfaces | ||
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 168 | ····················································································s | 167 | ····················································································should·ignore |
| 169 | ····················································································an | 168 | ····················································································traffic·on·this |
| 169 | ····················································································network·as·an·anti- | ||
| 170 | ···················································································· | 170 | ····················································································spoofing·measure. |
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 54 lines modified | Offset 187, 24 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| Max diff block lines reached; 482286/495873 bytes (97.26%) of diff not shown. | |||
| Offset 63, 274 lines modified | Offset 63, 274 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d4 | 00000450:·3c74·643e·456e·7375·7265·2053·4d41·5020··<td>Ensure·SMAP· | ||
| 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | 00000460:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | ||
| 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | 00000470:·6475·7269·6e67·2062·6f6f·743c·2f74·643e··during·boot</td> | ||
| 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | 00000480:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | 00000490:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 000004a0:·2020·2020·2054·6865·2053·4d4 | 000004a0:·2020·2020·2054·6865·2053·4d41·5020·6973·······The·SMAP·is | ||
| 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | 000004b0:·2075·7365·6420·746f·2070·7265·7665·6e74···used·to·prevent | ||
| 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | 000004c0:·2074·6865·2073·7570·6572·7669·736f·7220···the·supervisor· | ||
| 000004d0:·6d6f·6465·2066·726f·6d20·6578·6563·7574··mode·from·execut | |||
| 000004e0:·696e·6720·7573·6572·2073·7061·6365·2063··ing·user·space·c | |||
| 000004f0:·6f64·652c·0a69·7420·6973·2065·6e61·626c··ode,.it·is·enabl | |||
| 00000500:·6564·2062·7920·6465·6661·756c·7420·7369··ed·by·default·si | |||
| 00000510:·6e63·6520·4c69·6e75·7820·6b65·726e·656c··nce·Linux·kernel | |||
| 00000 | 000004d0:·6d6f·6465·2066·726f·6d20·756e·696e·7465··mode·from·uninte | ||
| 000004e0:·6e74·696f·6e61·6c6c·7920·7265·6164·696e··ntionally·readin | |||
| 000004f0:·672f·7772·6974·696e·6720·696e·746f·0a6d··g/writing·into.m | |||
| 00000500:·656d·6f72·7920·7061·6765·7320·696e·2074··emory·pages·in·t | |||
| 00000510:·6865·2075·7365·7220·7370·6163·652c·2069··he·user·space,·i | |||
| 00000520:·7420·6973·2065·6e61·626c·6564·2062·7920··t·is·enabled·by· | |||
| 00000530:·6465·6661·756c·7420·7369·6e63·6520·4c69··default·since·Li | |||
| 00000540:·6e75·7820·6b65·726e·656c·2033·2e37·2e0a··nux·kernel·3.7.. | |||
| 00000550:·4275·7420·6974·2063·6f75·6c64·2062·6520··But·it·could·be· | |||
| 00000560:·6469·7361·626c·6564·2074·6872·6f75·6768··disabled·through | |||
| 00000570:·206b·6572·6e65·6c20·626f·6f74·2070·6172···kernel·boot·par | |||
| 00000580:·616d·6574·6572·732e·0a0a·456e·7375·7265··ameters...Ensure | |||
| 00000590:·2074·6861·7420·5375·7065·7276·6973·6f72···that·Supervisor | |||
| 000005a0:·204d·6f64·6520·4163·6365·7373·2050·7265···Mode·Access·Pre | |||
| 000005b0:·7665·6e74·696f·6e20·2853·4d41·5029·2069··vention·(SMAP)·i | |||
| 000005 | 000005c0:·7320·6e6f·7420·6469·7361·626c·6564·2062··s·not·disabled·b | ||
| 000005d0:·790a·7468·6520·3c74·743e·6e6f·736d·6170··y.the·<tt>nosmap | |||
| 000005e0:·3c2f·7474·3e20·626f·6f74·2070·6172·616d··</tt>·boot·param | |||
| 000005f0:·656e·7465·7220·6f70·7469·6f6e·2e0a·0a43··enter·option...C | |||
| 00000600:·6865·636b·2074·6861·7420·7468·6520·6c69··heck·that·the·li | |||
| 00000610:·6e65·203c·7072·653e·4752·5542·5f43·4d44··ne·<pre>GRUB_CMD | |||
| 00000620:·4c49·4e45·5f4c·494e·5558·3d22·2e2e·2e22··LINE_LINUX="..." | |||
| 00000630:·3c2f·7072·653e·2077·6974·6869·6e20·3c74··</pre>·within·<t | |||
| 00000640:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000650:·7275·623c·2f74·743e·0a64·6f65·736e·2774··rub</tt>.doesn't | |||
| 00000660:·2063·6f6e·7461·696e·2074·6865·2061·7267···contain·the·arg | |||
| 00000670:·756d·656e·7420·3c74·743e·6e6f·736d·6170··ument·<tt>nosmap | |||
| 00000680:·3c2f·7474·3e2e·0a52·756e·2074·6865·2066··</tt>..Run·the·f | |||
| 00000540:·6872·6f75·6768·0a6b·6572·6e65·6c20·626f··hrough.kernel·bo | |||
| 00000550:·6f74·2070·6172·616d·6574·6572·732e·0a0a··ot·parameters... | |||
| 00000560:·456e·7375·7265·2074·6861·7420·5375·7065··Ensure·that·Supe | |||
| 00000570:·7276·6973·6f72·204d·6f64·6520·4578·6563··rvisor·Mode·Exec | |||
| 00000580:·7574·696f·6e20·5072·6576·656e·7469·6f6e··ution·Prevention | |||
| 00000590:·2028·534d·4550·2920·6973·206e·6f74·2064···(SMEP)·is·not·d | |||
| 000005a0:·6973·6162·6c65·6420·6279·0a74·6865·203c··isabled·by.the·< | |||
| 000005b0:·7474·3e6e·6f73·6d65·703c·2f74·743e·2062··tt>nosmep</tt>·b | |||
| 000005c0:·6f6f·7420·7061·7261·6d65·6e74·6572·206f··oot·paramenter·o | |||
| 000005d0:·7074·696f·6e2e·0a0a·4368·6563·6b20·7468··ption...Check·th | |||
| 000005e0:·6174·2074·6865·206c·696e·6520·3c70·7265··at·the·line·<pre | |||
| 000005f0:·3e47·5255·425f·434d·444c·494e·455f·4c49··>GRUB_CMDLINE_LI | |||
| 00000600:·4e55·583d·222e·2e2e·223c·2f70·7265·3e20··NUX="..."</pre>· | |||
| 00000610:·7769·7468·696e·203c·7474·3e2f·6574·632f··within·<tt>/etc/ | |||
| 00000620:·6465·6661·756c·742f·6772·7562·3c2f·7474··default/grub</tt | |||
| 00000630:·3e0a·646f·6573·6e27·7420·636f·6e74·6169··>.doesn't·contai | |||
| 00000640:·6e20·7468·6520·6172·6775·6d65·6e74·203c··n·the·argument·< | |||
| 00000650:·7474·3e6e·6f73·6d65·703c·2f74·743e·2e0a··tt>nosmep</tt>.. | |||
| 00000660:·5275·6e20·7468·6520·666f·6c6c·6f77·696e··Run·the·followin | |||
| 00000670:·6720·636f·6d6d·616e·6420·746f·2075·7064··g·command·to·upd | |||
| 00000680:·6174·6520·636f·6d6d·616e·6420·6c69·6e65··ate·command·line | |||
| 00000690:·2066·6f72·2061·6c72·6561·6479·2069·6e73···for·already·ins | |||
| 000006a0:·7461·6c6c·6564·206b·6572·6e65·6c73·3a0a··talled·kernels:. | |||
| 000006b0:·3c70·7265·3e23·2067·7275·6262·7920·2d2d··<pre>#·grubby·-- | |||
| 000006c0:·7570·6461·7465·2d6b·6572·6e65·6c3d·414c··update-kernel=AL | |||
| 000006d0:·4c20·2d2d·7265·6d6f·7665·2d61·7267·733d··L·--remove-args= | |||
| 000006e0:·226e·6f73·6d65·7022·3c2f·7072·653e·0a20··"nosmep"</pre>.· | |||
| 000006f0:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | |||
| 00000700:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000710:·6e2d·5553·223e·0a20·2020·2020·2020·2044··n-US">.········D | |||
| 00000720:·6973·6162·6c69·6e67·2053·4d45·5020·6361··isabling·SMEP·ca | |||
| 00000730:·6e20·6661·6369·6c69·7461·7465·2065·7870··n·facilitate·exp | |||
| 00000740:·6c6f·6974·6174·696f·6e20·6f66·2063·6572··loitation·of·cer | |||
| 00000750:·7461·696e·2076·756c·6e65·7261·6269·6c69··tain·vulnerabili | |||
| 00000760:·7469·6573·2062·6563·6175·7365·2069·7420··ties·because·it· | |||
| 00000770:·616c·6c6f·7773·0a74·6865·206b·6572·6e65··allows.the·kerne | |||
| 00000780:·6c20·746f·2075·6e69·6e74·656e·7469·6f6e··l·to·unintention | |||
| 00000790:·616c·6c79·2065·7865·6375·7465·2063·6f64··ally·execute·cod | |||
| 000007a0:·6520·696e·206c·6573·7320·7072·6976·696c··e·in·less·privil | |||
| 000007b0:·6567·6564·206d·656d·6f72·7920·7370·6163··eged·memory·spac | |||
| 000007c0:·652e·0a20·2020·2020·203c·2f74·643e·0a20··e..······</td>.· | |||
| 000007d0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | |||
| 000007e0:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | |||
| 000007f0:·7464·3e0a·2020·2020·2020·3c74·643e·496e··td>.······<td>In | |||
| 00000800:·7374·616c·6c20·5041·4520·4b65·726e·656c··stall·PAE·Kernel | |||
| 00000810:·206f·6e20·5375·7070·6f72·7465·6420·3332···on·Supported·32 | |||
| 00000820:·2d62·6974·2078·3836·2053·7973·7465·6d73··-bit·x86·Systems | |||
| 00000830:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | |||
| 00000840:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | |||
| 00000850:·3e0a·2020·2020·2020·2020·5379·7374·656d··>.········System | |||
| 00000860:·7320·7468·6174·2061·7265·2075·7369·6e67··s·that·are·using | |||
| 00000870:·2074·6865·2036·342d·6269·7420·7838·3620···the·64-bit·x86· | |||
| 00000880:·6b65·726e·656c·2070·6163·6b61·6765·0a64··kernel·package.d | |||
| 00000890:·6f20·6e6f·7420·6e65·6564·2074·6f20·696e··o·not·need·to·in | |||
| 000008a0:·7374·616c·6c20·7468·6520·6b65·726e·656c··stall·the·kernel | |||
| 000008b0:·2d50·4145·2070·6163·6b61·6765·2062·6563··-PAE·package·bec | |||
| 000008c0:·6175·7365·2074·6865·2036·342d·6269·740a··ause·the·64-bit. | |||
| 000008d0:·7838·3620·6b65·726e·656c·2061·6c72·6561··x86·kernel·alrea | |||
| 000008e0:·6479·2069·6e63·6c75·6465·7320·7468·6973··dy·includes·this | |||
| 000008f0:·2073·7570·706f·7274·2e20·486f·7765·7665···support.·Howeve | |||
| 00000900:·722c·2069·6620·7468·6520·7379·7374·656d··r,·if·the·system | |||
| 00000910:·2069·730a·3332·2d62·6974·2061·6e64·2061···is.32-bit·and·a | |||
| 00000920:·6c73·6f20·7375·7070·6f72·7473·2074·6865··lso·supports·the | |||
| 00000930:·2050·4145·2061·6e64·204e·5820·6665·6174···PAE·and·NX·feat | |||
| 00000940:·7572·6573·2061·730a·6465·7465·726d·696e··ures·as.determin | |||
| 00000950:·6564·2069·6e20·7468·6520·7072·6576·696f··ed·in·the·previo | |||
| 00000960:·7573·2073·6563·7469·6f6e·2c20·7468·6520··us·section,·the· | |||
| 00000970:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 00000980:·6765·2073·686f·756c·640a·6265·2069·6e73··ge·should.be·ins | |||
| 00000990:·7461·6c6c·6564·2074·6f20·656e·6162·6c65··talled·to·enable | |||
| 000009a0:·2058·4420·6f72·204e·5820·7375·7070·6f72···XD·or·NX·suppor | |||
| 000009b0:·742e·0a54·6865·203c·636f·6465·3e6b·6572··t..The·<code>ker | |||
| 000009c0:·6e65·6c2d·5041·453c·2f63·6f64·653e·2070··nel-PAE</code>·p | |||
| 000009d0:·6163·6b61·6765·2063·616e·2062·6520·696e··ackage·can·be·in | |||
| 000009e0:·7374·616c·6c65·6420·7769·7468·2074·6865··stalled·with·the | |||
| 00000 | 00000690:·6f6c·6c6f·7769·6e67·2063·6f6d·6d61·6e64··ollowing·command | ||
| 00000a00:·6e64·3a0a·3c70·7265·3e0a·2420·7375·646f··nd:.<pre>.$·sudo | |||
| 00000a10:·2079·756d·2069·6e73·7461·6c6c·206b·6572···yum·install·ker | |||
| 00000a20:·6e65·6c2d·5041·453c·2f70·7265·3e0a·5468··nel-PAE</pre>.Th | |||
| Max diff block lines reached; 3003141/3039181 bytes (98.81%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 29 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 8 | 2 | 8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 19 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 4 | ······························mode·from·executing·user·space·code,·it·is | 20 | ······························mode·from·executing·user·space·code,·it·is |
| 5 | ······························enabled·by·default·since·Linux·kernel·3.0. | 21 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 6 | ······························But·it·could·be·disabled·through·kernel·boot | 22 | ······························But·it·could·be·disabled·through·kernel·boot |
| 7 | ······························parameters.·Ensure·that·Supervisor·Mode | 23 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 24 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 25 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 15, 14 lines modified | Offset 31, 21 lines modified | ||
| 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 17 | ······························argument·nosmep.·Run·the·following·command | 33 | ······························argument·nosmep.·Run·the·following·command |
| 18 | ······························to·update·command·line·for·already·installed | 34 | ······························to·update·command·line·for·already·installed |
| 19 | ······························kernels: | 35 | ······························kernels: |
| 20 | ······························#·grubby·--update-kernel=ALL·--remove- | 36 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 21 | ······························args="nosmep" | 37 | ······························args="nosmep" |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 22 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 45 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 23 | ······························package·do·not·need·to·install·the·kernel- | 46 | ······························package·do·not·need·to·install·the·kernel- |
| 24 | ······························PAE·package·because·the·64-bit·x86·kernel | 47 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 25 | ······························already·includes·this·support.·However,·if | 48 | ······························already·includes·this·support.·However,·if |
| 26 | ······························the·system·is·32-bit·and·also·supports·the | 49 | ······························the·system·is·32-bit·and·also·supports·the |
| 27 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 50 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 28 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 51 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 39, 37 lines modified | Offset 62, 14 lines modified | ||
| 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| 44 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and |
| 45 | ···········································································validated. | 68 | ···········································································validated. |
| 46 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 47 | ······························mode·from·unintentionally·reading/writing | ||
| 48 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 49 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 50 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 51 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 52 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 53 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 54 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 57 | ······························argument·nosmap.·Run·the·following·command | ||
| 58 | ······························to·update·command·line·for·already·installed | ||
| 59 | ······························kernels: | ||
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 61 | ······························args="nosmap" | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 14 lines modified | Offset 99, 125 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being | ||
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·-- | ||
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························The·kernel·may·merge·similar·slabs·together | ||
| 121 | ······························to·reduce·overhead·and·increase·cache | ||
| 122 | ······························hotness·of·objects.·Disabling·merging·of | ||
| 123 | ······························slabs·keeps·the·slabs·separate·and·reduces | ||
| 124 | ······························the·risk·of·kernel·heap·overflows | ||
| 125 | ······························overwriting·objects·in·merged·caches.·To·····Disabling·the·merge·of·slabs·of | ||
| 126 | ······························disable·merging·of·slabs·in·the·Kernel·add···similar·sizes·prevents·the·kernel·from | ||
| 127 | ······························the·argument·slab_nomerge=yes·to·the·default·merging·a·seemingly·useless·but | ||
| 128 | ······························GRUB·2·command·line·for·the·Linux·operating··vulnerable·slab·with·a·useful·and | ||
| 129 | ······························system.·To·ensure·that·slab_nomerge=yes·is···valuable·slab.·This·increase·the·risk | ||
| 130 | R8··Disable·merging·of·slabs··added·as·a·kernel·command·line·argument·to···that·a·heap·overflow·could·overwrite | ||
| 131 | ····with·similar·size·········newly·installed·kernels,·add·················objects·from·merged·caches,·with | ||
| 132 | ······························slab_nomerge=yes·to·the·default·Grub2········unmerged·caches·the·heap·overflow | ||
| 133 | ······························command·line·for·Linux·operating·systems.····would·only·affect·the·objects·in·the | ||
| 134 | ······························Modify·the·line·within·/etc/default/grub·as··same·cache.·Overall,·this·reduces·the | ||
| 135 | ······························shown·below:·································kernel·attack·surface·area·by | ||
| Max diff block lines reached; 673590/691617 bytes (97.39%) of diff not shown. | |||
| Offset 40, 57 lines modified | Offset 40, 14 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Oracle·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td>Disable·SSH·Root·Login</td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········The·root·user·should·never·be·allowed·to·login·to·a | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 94 | system·directly·over·a·network. | 51 | system·directly·over·a·network. |
| 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 105, 51 lines modified | Offset 62, 31 lines modified | ||
| 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 107 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 108 | ······</td> | 65 | ······</td> |
| 109 | ····</tr> | 66 | ····</tr> |
| 110 | ····<tr> | 67 | ····<tr> |
| 111 | ······<td>3.1.1</td> | 68 | ······<td>3.1.1</td> |
| 112 | ······<td>Disable·GDM· | 69 | ······<td>Disable·GDM·Guest·Login</td> |
| 113 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials |
| 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | 72 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | |
| 73 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 74 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | 75 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: |
| 119 | <pre>[daemon] | 76 | <pre>[daemon] |
| 120 | 77 | TimedLoginEnable=false</pre> | |
| 121 | ······</td> | 78 | ······</td> |
| 122 | ······<td·xml:lang="en-US"> | 79 | ······<td·xml:lang="en-US"> |
| 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 124 | system·security. | 81 | system·security. |
| 125 | ······</td> | 82 | ······</td> |
| 126 | ····</tr> | 83 | ····</tr> |
| 127 | ····<tr> | 84 | ····<tr> |
| 128 | ······<td>3.1.1<br/>3.1.5</td> | 85 | ······<td>3.1.1<br/>3.1.5</td> |
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 147 | ······<td>Verify·Only·Root·Has·UID·0</td> | 86 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 148 | ······<td·xml:lang="en-US"> | 87 | ······<td·xml:lang="en-US"> |
| 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 88 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | 89 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have |
| 151 | their·UID·changed. | 90 | their·UID·changed. |
| 152 | <br·/> | 91 | <br·/> |
| 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | 92 | If·the·account·is·associated·with·system·commands·or·applications·the·UID |
| Offset 188, 14 lines modified | Offset 125, 77 lines modified | ||
| 188 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | 125 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance |
| 189 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | 126 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of |
| 190 | misconfiguration·elsewhere. | 127 | misconfiguration·elsewhere. |
| 191 | ······</td> | 128 | ······</td> |
| 192 | ····</tr> | 129 | ····</tr> |
| 193 | ····<tr> | 130 | ····<tr> |
| 194 | ······<td>3.1.1<br/>3.1.5</td> | 131 | ······<td>3.1.1<br/>3.1.5</td> |
| 132 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········If·an·account·is·configured·for·password·authentication | ||
| 135 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 136 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 137 | <tt>nullok</tt>·in | ||
| 138 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| Max diff block lines reached; 456731/464739 bytes (98.28%) of diff not shown. | |||
| Offset 1, 38 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of |
| 2 | Oracle·Linux·8 | 2 | Oracle·Linux·8 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Oracle·Linux··login,·then·escalate | ||
| 13 | ·······································8's·/etc/securetty·file·only·allows·the·root·user·to···to·privileged·(root) | ||
| 14 | ·······································login·at·the·console·physically·attached·to·the········access·via·su·/ | ||
| 15 | ·······································system.·To·prevent·root·from·logging·in,·remove·the····sudo.·This·is | ||
| 16 | ·······································contents·of·this·file.·To·prevent·direct·root·logins,··required·for·FISMA | ||
| 17 | ·······································remove·the·contents·of·this·file·by·typing·the·········Low·and·FISMA | ||
| 18 | ·······································following·command:·····································Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 21 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 22 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 23 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 24 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 25 | ·······································vc/3···················································actions·taken·on·the | ||
| 26 | ·······································vc/4···················································system·using·the | ||
| 27 | ······························································································root·account. | ||
| 28 | ······························································································Even·though·the | 3 | ······························································································Even·though·the |
| 29 | ······························································································communications | 4 | ······························································································communications |
| 30 | ······························································································channel·may·be | 5 | ······························································································channel·may·be |
| 31 | ······························································································encrypted,·an | 6 | ······························································································encrypted,·an |
| 32 | ······························································································additional·layer·of | 7 | ······························································································additional·layer·of |
| 33 | ······························································································security·is·gained | 8 | ······························································································security·is·gained |
| 34 | ······························································································by·extending·the | 9 | ······························································································by·extending·the |
| Offset 47, 34 lines modified | Offset 22, 23 lines modified | ||
| 47 | ······························································································actions·performed·on | 22 | ······························································································actions·performed·on |
| 48 | ······························································································the·system·and·also | 23 | ······························································································the·system·and·also |
| 49 | ······························································································helps·to·minimize | 24 | ······························································································helps·to·minimize |
| 50 | ······························································································direct·attack | 25 | ······························································································direct·attack |
| 51 | ······························································································attempts·on·root's | 26 | ······························································································attempts·on·root's |
| 52 | ······························································································password. | 27 | ······························································································password. |
| 53 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 54 | ·······································automatically·login·without·user·interaction·or | ||
| 55 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 56 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 57 | 29 | ·······································login·without·credentials·which·can·be·useful·for | |
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 58 | ······································· | 33 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts |
| 59 | ······································· | 34 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system |
| 60 | ······································· | 35 | ·······································etc/gdm/custom.conf.·For·example:······················security. |
| 61 | ·······································[daemon] | 36 | ·······································[daemon] |
| 62 | ······································· | 37 | ·······································TimedLoginEnable=false |
| 63 | ······························································································If·an·account·has·an | ||
| 64 | ······························································································empty·password, | ||
| 65 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 66 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 67 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 68 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 69 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 70 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 71 | ······························································································never·be·used·in | ||
| 72 | ······························································································operational | ||
| 73 | ······························································································environments. | ||
| 74 | ······························································································An·account·has·root | 38 | ······························································································An·account·has·root |
| 75 | ······························································································authority·if·it·has | 39 | ······························································································authority·if·it·has |
| 76 | ······························································································a·UID·of·0.·Multiple | 40 | ······························································································a·UID·of·0.·Multiple |
| 77 | ······························································································accounts·with·a·UID | 41 | ······························································································accounts·with·a·UID |
| 78 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 42 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 79 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 43 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 80 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 44 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 97, 104 lines modified | Offset 61, 129 lines modified | ||
| 97 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login | 61 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login |
| 98 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require | 62 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require |
| 99 | ·······································PermitEmptyPasswords·no································a·password,·even·in | 63 | ·······································PermitEmptyPasswords·no································a·password,·even·in |
| 100 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of | 64 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of |
| 101 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration | 65 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration |
| 102 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. | 66 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. |
| 103 | ·······································passwords. | 67 | ·······································passwords. |
| 68 | ······························································································If·an·account·has·an | ||
| 69 | ······························································································empty·password, | ||
| 70 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 71 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 72 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 73 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 74 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 75 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 104 | ······························································································ | 76 | ······························································································never·be·used·in |
| 105 | ······························································································ | 77 | ······························································································operational |
| 106 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 107 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 108 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 109 | ·······································ttyS1··················································actions·taken·on·the | ||
| 110 | ······························································································systems·using·the | ||
| 111 | ······························································································ | 78 | ······························································································environments. |
| 112 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 113 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 114 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 115 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 116 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 117 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 118 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 119 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 120 | ·······································[daemon] | ||
| 121 | ·······································TimedLoginEnable=false | ||
| 122 | ······························································································This·prevents | 79 | ······························································································This·prevents |
| 123 | ······························································································attackers·with | 80 | ······························································································attackers·with |
| 124 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | 81 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from |
| 125 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | 82 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing |
| 126 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | 83 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the |
| 127 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | 84 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining |
| 128 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | 85 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such |
| 129 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | 86 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further |
| 130 | ·······································emergency.service.·····································prevented·by | 87 | ·······································emergency.service.·····································prevented·by |
| 131 | ······························································································configuring·the | 88 | ······························································································configuring·the |
| 132 | ······························································································bootloader·password. | 89 | ······························································································bootloader·password. |
| 90 | ·······································To·further·limit·access·to·the·root·account, | ||
| 91 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 92 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 93 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 94 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 95 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| Max diff block lines reached; 797969/815916 bytes (97.80%) of diff not shown. | |||
| Offset 4070, 15 lines modified | Offset 4070, 15 lines modified | ||
| 4070 | <tt>RekeyLimit</tt>. | 4070 | <tt>RekeyLimit</tt>. |
| 4071 | ··</td> | 4071 | ··</td> |
| 4072 | ··<td·xml:lang="en-US"> | 4072 | ··<td·xml:lang="en-US"> |
| 4073 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4073 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4074 | time-based·limit,·effects·of·potential·attacks·against | 4074 | time-based·limit,·effects·of·potential·attacks·against |
| 4075 | encryption·keys·are·limited. | 4075 | encryption·keys·are·limited. |
| 4076 | ··</td> | 4076 | ··</td> |
| 4077 | ··<td>var_ssh_client_rekey_limit_ | 4077 | ··<td>var_ssh_client_rekey_limit_time=1hour<br/>var_ssh_client_rekey_limit_size=1G</td> |
| 4078 | </tr> | 4078 | </tr> |
| 4079 | <tr> | 4079 | <tr> |
| 4080 | ··<td></td> | 4080 | ··<td></td> |
| 4081 | ··<td>N/A</td> | 4081 | ··<td>N/A</td> |
| 4082 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4082 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4083 | ··<td·xml:lang="en-US"> | 4083 | ··<td·xml:lang="en-US"> |
| 4084 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4084 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 3341, 16 lines modified | Offset 3341, 16 lines modified | ||
| 3341 | ··················································································································options,·which·can | 3341 | ··················································································································options,·which·can |
| 3342 | ··················································································································help·protect | 3342 | ··················································································································help·protect |
| 3343 | ··················································································································programs·which·use | 3343 | ··················································································································programs·which·use |
| 3344 | ··················································································································it. | 3344 | ··················································································································it. |
| 3345 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3345 | ·························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3346 | ·························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3346 | ·························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3347 | ········Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3347 | ········Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3348 | ·····N/·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3348 | ·····N/·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_time=1hour |
| 3349 | ·····A··renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3349 | ·····A··renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_size=1G |
| 3350 | ········for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3350 | ········for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3351 | ·························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3351 | ·························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3352 | ·························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3352 | ·························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3353 | ··················································································································Some·SSH | 3353 | ··················································································································Some·SSH |
| 3354 | ··················································································································implementations·use | 3354 | ··················································································································implementations·use |
| 3355 | ··················································································································the·openssl·library | 3355 | ··················································································································the·openssl·library |
| 3356 | ··················································································································for·entropy,·which | 3356 | ··················································································································for·entropy,·which |
| Offset 24427, 17 lines modified | Offset 24427, 17 lines modified | ||
| 0005f6a0:·6e67·0a74·696d·652d·6261·7365·6420·6c69··ng.time-based·li | 0005f6a0:·6e67·0a74·696d·652d·6261·7365·6420·6c69··ng.time-based·li | ||
| 0005f6b0:·6d69·742c·2065·6666·6563·7473·206f·6620··mit,·effects·of· | 0005f6b0:·6d69·742c·2065·6666·6563·7473·206f·6620··mit,·effects·of· | ||
| 0005f6c0:·706f·7465·6e74·6961·6c20·6174·7461·636b··potential·attack | 0005f6c0:·706f·7465·6e74·6961·6c20·6174·7461·636b··potential·attack | ||
| 0005f6d0:·7320·6167·6169·6e73·740a·656e·6372·7970··s·against.encryp | 0005f6d0:·7320·6167·6169·6e73·740a·656e·6372·7970··s·against.encryp | ||
| 0005f6e0:·7469·6f6e·206b·6579·7320·6172·6520·6c69··tion·keys·are·li | 0005f6e0:·7469·6f6e·206b·6579·7320·6172·6520·6c69··tion·keys·are·li | ||
| 0005f6f0:·6d69·7465·642e·0a20·203c·2f74·643e·0a20··mited..··</td>.· | 0005f6f0:·6d69·7465·642e·0a20·203c·2f74·643e·0a20··mited..··</td>.· | ||
| 0005f700:·203c·7464·3e76·6172·5f72·656b·6579·5f6c···<td>var_rekey_l | 0005f700:·203c·7464·3e76·6172·5f72·656b·6579·5f6c···<td>var_rekey_l | ||
| 0005f710:·696d·6974·5f73·697a·653d·3147·3c62·722f··imit_size=1G<br/ | |||
| 0005f720:·3e76·6172·5f72·656b·6579·5f6c·696d·6974··>var_rekey_limit | |||
| 0005f7 | 0005f730:·5f74·696d·653d·3168·6f75·723c·2f74·643e··_time=1hour</td> | ||
| 0005f720:·6272·2f3e·7661·725f·7265·6b65·795f·6c69··br/>var_rekey_li | |||
| 0005f730:·6d69·745f·7369·7a65·3d31·473c·2f74·643e··mit_size=1G</td> | |||
| 0005f740:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | 0005f740:·0a3c·2f74·723e·0a3c·7472·3e0a·2020·3c74··.</tr>.<tr>.··<t | ||
| 0005f750:·643e·3c2f·7464·3e0a·2020·3c74·643e·4e2f··d></td>.··<td>N/ | 0005f750:·643e·3c2f·7464·3e0a·2020·3c74·643e·4e2f··d></td>.··<td>N/ | ||
| 0005f760:·413c·2f74·643e·0a20·203c·7464·3e53·5348··A</td>.··<td>SSH | 0005f760:·413c·2f74·643e·0a20·203c·7464·3e53·5348··A</td>.··<td>SSH | ||
| 0005f770:·2073·6572·7665·7220·7573·6573·2073·7472···server·uses·str | 0005f770:·2073·6572·7665·7220·7573·6573·2073·7472···server·uses·str | ||
| 0005f780:·6f6e·6720·656e·7472·6f70·7920·746f·2073··ong·entropy·to·s | 0005f780:·6f6e·6720·656e·7472·6f70·7920·746f·2073··ong·entropy·to·s | ||
| 0005f790:·6565·643c·2f74·643e·0a20·203c·7464·2078··eed</td>.··<td·x | 0005f790:·6565·643c·2f74·643e·0a20·203c·7464·2078··eed</td>.··<td·x | ||
| 0005f7a0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | 0005f7a0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> |
| Offset 7774, 16 lines modified | Offset 7774, 16 lines modified | ||
| 7774 | ·································private·key.··········································system·where·the | 7774 | ·································private·key.··········································system·where·the |
| 7775 | ·······················································································associated·public | 7775 | ·······················································································associated·public |
| 7776 | ·······················································································key·has·been | 7776 | ·······················································································key·has·been |
| 7777 | ·······················································································installed. | 7777 | ·······················································································installed. |
| 7778 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7778 | ·································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7779 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7779 | ·································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7780 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7780 | ···········Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7781 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7781 | ········N/·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_size=1G |
| 7782 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7782 | ········A··renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_time=1hour |
| 7783 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7783 | ·································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7784 | ·································RekeyLimit·1G·1hour···································against·encryption | 7784 | ·································RekeyLimit·1G·1hour···································against·encryption |
| 7785 | ·······················································································keys·are·limited. | 7785 | ·······················································································keys·are·limited. |
| 7786 | ·······················································································SSH·implementation | 7786 | ·······················································································SSH·implementation |
| 7787 | ·······················································································in·Oracle·Linux·8 | 7787 | ·······················································································in·Oracle·Linux·8 |
| 7788 | ·······················································································uses·the·openssl | 7788 | ·······················································································uses·the·openssl |
| 7789 | ·······················································································library,·which | 7789 | ·······················································································library,·which |
| Offset 63, 14949 lines modified | Offset 63, 14949 lines modified | ||
| 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | 000003e0:·2020·2020·3c74·683e·5275·6c65·2054·6974······<th>Rule·Tit | ||
| 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | 000003f0:·6c65·3c2f·7468·3e0a·2020·2020·3c74·683e··le</th>.····<th> | ||
| 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | 00000400:·4465·7363·7269·7074·696f·6e3c·2f74·683e··Description</th> | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | Diff chunk too large, falling back to line-by-line diff (977 lines added, 977 lines removed) | |
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·286 | 00000450:·2d32·2861·293c·2f74·643e·0a20·2020·2020··-2(a)</td>.····· | ||
| 00000460:· | 00000460:·203c·7464·3e43·6f6e·6669·6775·7265·2061···<td>Configure·a | ||
| 00000470:·7 | 00000470:·7564·6974·696e·6720·6f66·2075·6e73·7563··uditing·of·unsuc | ||
| 00000480:· | 00000480:·6365·7373·6675·6c20·6f77·6e65·7273·6869··cessful·ownershi | ||
| 00000490:· | 00000490:·7020·6368·616e·6765·733c·2f74·643e·0a20··p·changes</td>.· | ||
| 000004a0:·20 | 000004a0:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 000004b0:·7 | 000004b0:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 000004c0:· | 000004c0:·2020·2045·6e73·7572·6520·7468·6174·2075·····Ensure·that·u | ||
| 000004d0:· | 000004d0:·6e73·7563·6365·7373·6675·6c20·6174·7465··nsuccessful·atte | ||
| 000004e0:· | 000004e0:·6d70·7473·2074·6f20·6368·616e·6765·2061··mpts·to·change·a | ||
| 000004f0:·6 | 000004f0:·6e20·6f77·6e65·7273·6869·7020·6f66·2066··n·ownership·of·f | ||
| 00000500:· | 00000500:·696c·6573·206f·7220·6469·7265·6374·6f72··iles·or·director | ||
| 00000510:· | 00000510:·6965·7320·6172·6520·6175·6469·7465·642e··ies·are·audited. | ||
| 00000520:· | 00000520:·0a0a·5468·6520·666f·6c6c·6f77·696e·6720··..The·following· | ||
| 00000530:· | 00000530:·7275·6c65·7320·636f·6e66·6967·7572·6520··rules·configure· | ||
| 00000540:·6 | 00000540:·6175·6469·7420·6173·2064·6573·6372·6962··audit·as·describ | ||
| 00000550:·6 | 00000550:·6564·2061·626f·7665·3a0a·3c70·7265·3e23··ed·above:.<pre># | ||
| 00000560:·2 | 00000560:·2320·556e·7375·6363·6573·7366·756c·206f··#·Unsuccessful·o | ||
| 00000570:· | 00000570:·776e·6572·7368·6970·2063·6861·6e67·650a··wnership·change. | ||
| 00000580:· | 00000580:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 00000590:· | 00000590:·4620·6172·6368·3d62·3332·202d·5320·6c63··F·arch=b32·-S·lc | ||
| 000005a0:· | 000005a0:·686f·776e·2c66·6368·6f77·6e2c·6368·6f77··hown,fchown,chow | ||
| 000005b0:·6e | 000005b0:·6e2c·6663·686f·776e·6174·202d·4620·6578··n,fchownat·-F·ex | ||
| 000005c0:· | 000005c0:·6974·3d2d·4541·4343·4553·202d·4620·6175··it=-EACCES·-F·au | ||
| 000005d0:· | 000005d0:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 000005e0:· | 000005e0:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000005f0:· | 000005f0:·793d·756e·7375·6363·6573·7366·756c·2d6f··y=unsuccessful-o | ||
| 00000600:· | 00000600:·776e·6572·2d63·6861·6e67·650a·2d61·2061··wner-change.-a·a | ||
| 00000610:·6 | 00000610:·6c77·6179·732c·6578·6974·202d·4620·6172··lways,exit·-F·ar | ||
| 00000620:· | 00000620:·6368·3d62·3634·202d·5320·6c63·686f·776e··ch=b64·-S·lchown | ||
| 00000630:· | 00000630:·2c66·6368·6f77·6e2c·6368·6f77·6e2c·6663··,fchown,chown,fc | ||
| 00000640:· | 00000640:·686f·776e·6174·202d·4620·6578·6974·3d2d··hownat·-F·exit=- | ||
| 00000650:· | 00000650:·4541·4343·4553·202d·4620·6175·6964·2667··EACCES·-F·auid&g | ||
| 00000660:· | 00000660:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 00000670:·3 | 00000670:·3d75·6e73·6574·202d·4620·6b65·793d·756e··=unset·-F·key=un | ||
| 00000680:· | 00000680:·7375·6363·6573·7366·756c·2d6f·776e·6572··successful-owner | ||
| 00000690:· | 00000690:·2d63·6861·6e67·650a·2d61·2061·6c77·6179··-change.-a·alway | ||
| 000006a0:·73 | 000006a0:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000006b0:· | 000006b0:·3332·202d·5320·6c63·686f·776e·2c66·6368··32·-S·lchown,fch | ||
| 000006c0:· | 000006c0:·6f77·6e2c·6368·6f77·6e2c·6663·686f·776e··own,chown,fchown | ||
| 000006d0:·642 | 000006d0:·6174·202d·4620·6578·6974·3d2d·4550·4552··at·-F·exit=-EPER | ||
| 000006e0:· | 000006e0:·4d20·2d46·2061·7569·6426·6774·3b3d·3130··M·-F·auid>=10 | ||
| 000006f0:· | 000006f0:·3030·202d·4620·6175·6964·213d·756e·7365··00·-F·auid!=unse | ||
| 00000700:·74 | 00000700:·7420·2d46·206b·6579·3d75·6e73·7563·6365··t·-F·key=unsucce | ||
| 00000710:·73 | 00000710:·7373·6675·6c2d·6f77·6e65·722d·6368·616e··ssful-owner-chan | ||
| 00000720:· | 00000720:·6765·0a2d·6120·616c·7761·7973·2c65·7869··ge.-a·always,exi | ||
| 00000730:·74 | 00000730:·7420·2d46·2061·7263·683d·6236·3420·2d53··t·-F·arch=b64·-S | ||
| 00000740:· | 00000740:·206c·6368·6f77·6e2c·6663·686f·776e·2c63···lchown,fchown,c | ||
| 00000750:· | 00000750:·686f·776e·2c66·6368·6f77·6e61·7420·2d46··hown,fchownat·-F | ||
| 00000760:· | 00000760:·2065·7869·743d·2d45·5045·524d·202d·4620···exit=-EPERM·-F· | ||
| 00000770:· | 00000770:·6175·6964·2667·743b·3d31·3030·3020·2d46··auid>=1000·-F | ||
| 00000780:· | 00000780:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 00000790:· | 00000790:·6b65·793d·756e·7375·6363·6573·7366·756c··key=unsuccessful | ||
| 000007a0:· | 000007a0:·2d6f·776e·6572·2d63·6861·6e67·6520·2020··-owner-change··· | ||
| 000007b0:· | 000007b0:·203c·2f70·7265·3e0a·0a4c·6f61·6420·6e65···</pre>..Load·ne | ||
| 000007c0:·2 | 000007c0:·7720·4175·6469·7420·7275·6c65·7320·696e··w·Audit·rules·in | ||
| 000007d0:·7 | 000007d0:·746f·206b·6572·6e65·6c20·6279·2072·756e··to·kernel·by·run | ||
| 000007e0:· | 000007e0:·6e69·6e67·3a0a·3c70·7265·3e61·7567·656e··ning:.<pre>augen | ||
| 000007f0:· | 000007f0:·7275·6c65·7320·2d2d·6c6f·6164·3c2f·7072··rules·--load</pr | ||
| 00000800:· | 00000800:·653e·0a0a·4e6f·7465·3a20·5468·6973·2072··e>..Note:·This·r | ||
| 00000810:· | 00000810:·756c·6520·7573·6573·2061·2073·7065·6369··ule·uses·a·speci | ||
| 00000820:· | 00000820:·616c·2073·6574·206f·6620·4175·6469·7420··al·set·of·Audit· | ||
| 00000830:· | 00000830:·7275·6c65·7320·746f·2063·6f6d·706c·7920··rules·to·comply· | ||
| 00000840:· | 00000840:·7769·7468·204f·5350·5020·342e·322e·312e··with·OSPP·4.2.1. | ||
| 00000850:·2 | 00000850:·2059·6f75·206d·6179·2072·6575·7365·2074···You·may·reuse·t | ||
| 00000860:· | 00000860:·6869·7320·7275·6c65·2069·6e20·6469·6666··his·rule·in·diff | ||
| 00000870:·6 | 00000870:·6572·656e·7420·7072·6f66·696c·6573·2e20··erent·profiles.· | ||
| 00000880:· | 00000880:·4966·2079·6f75·2064·6563·6964·6520·746f··If·you·decide·to | ||
| 00000890:· | 00000890:·2064·6f20·736f·2c20·6974·2069·7320·7265···do·so,·it·is·re | ||
| 000008a0:· | 000008a0:·636f·6d6d·656e·6465·6420·7468·6174·2079··commended·that·y | ||
| 000008b0:·6f7 | 000008b0:·6f75·2069·6e73·7065·6374·2063·6f6e·7465··ou·inspect·conte | ||
| 000008c0:· | 000008c0:·6e74·7320·6f66·2074·6865·2066·696c·6520··nts·of·the·file· | ||
| 000008d0:· | 000008d0:·636c·6f73·656c·7920·616e·6420·6d61·6b65··closely·and·make | ||
| 000008e0:· | 000008e0:·2073·7572·6520·7468·6174·2074·6865·7920···sure·that·they· | ||
| 000008f0:·7 | 000008f0:·6172·6520·616c·6c69·676e·6564·2077·6974··are·alligned·wit | ||
| 00000900:·6 | 00000900:·6820·796f·7572·206e·6565·6473·2e0a·2020··h·your·needs..·· | ||
| 00000910:· | 00000910:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | ||
| 00000920:· | 00000920:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | ||
| 00000930:· | 00000930:·2d55·5322·3e0a·2020·2020·2020·2020·556e··-US">.········Un | ||
| 00000940:· | 00000940:·7375·6363·6573·7366·756c·2061·7474·656d··successful·attem | ||
| 00000950:· | 00000950:·7074·7320·746f·2063·6861·6e67·6520·616e··pts·to·change·an | ||
| 00000960:· | 00000960:·206f·776e·6572·7368·6970·206f·6620·6669···ownership·of·fi | ||
| 00000970:·6 | 00000970:·6c65·7320·6f72·2064·6972·6563·746f·7269··les·or·directori | ||
| 00000980:·65 | 00000980:·6573·206d·6967·6874·2062·6520·7369·676e··es·might·be·sign | ||
| 00000990:·7320·6f6 | 00000990:·7320·6f66·2061·206d·616c·6963·696f·7573··s·of·a·malicious | ||
| 000009a0:· | 000009a0:·2061·6374·6976·6974·792e·2048·6176·696e···activity.·Havin | ||
| 000009b0:·6 | 000009b0:·6720·7375·6368·2065·7665·6e74·7320·6175··g·such·events·au | ||
| 000009c0:· | 000009c0:·6469·7465·6420·6865·6c70·7320·696e·206d··dited·helps·in·m | ||
| 000009d0:·6 | 000009d0:·6f6e·6974·6f72·696e·6720·616e·6420·696e··onitoring·and·in | ||
| 000009e0:·7 | 000009e0:·7665·7374·6967·6174·696f·6e20·6f66·2073··vestigation·of·s | ||
| 000009f0:·7 | 000009f0:·7563·6820·6163·7469·7669·7469·6573·2e0a··uch·activities.. | ||
| 00000a00:· | 00000a00:·2020·2020·2020·3c2f·7464·3e0a·2020·2020········</td>.···· | ||
| 00000a10:· | 00000a10:·3c2f·7472·3e0a·2020·2020·3c74·723e·0a20··</tr>.····<tr>.· | ||
| 00000a20:·20 | 00000a20:·2020·2020·203c·7464·3e41·552d·3228·6129·······<td>AU-2(a) | ||
| 00000a30:· | 00000a30:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 00000a40:· | 00000a40:·436f·6e66·6967·7572·6520·6175·6469·7469··Configure·auditi | ||
| 00000a50:· | 00000a50:·6e67·206f·6620·756e·7375·6363·6573·7366··ng·of·unsuccessf | ||
| 00000a60:· | 00000a60:·756c·2066·696c·6520·6372·6561·7469·6f6e··ul·file·creation | ||
| 00000a70:· | 00000a70:·7320·2841·4172·6368·3634·293c·2f74·643e··s·(AArch64)</td> | ||
| 00000a80:· | 00000a80:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000a90:·6 | 00000a90:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000aa0:· | 00000aa0:·2020·2020·2045·6e73·7572·6520·7468·6174·······Ensure·that | ||
| 00000ab0:· | 00000ab0:·2075·6e73·7563·6365·7373·6675·6c20·6174···unsuccessful·at | ||
| 00000ac0:· | 00000ac0:·7465·6d70·7473·2074·6f20·6372·6561·7465··tempts·to·create | ||
| 00000ad0:· | 00000ad0:·2061·2066·696c·6520·6172·6520·6175·6469···a·file·are·audi | ||
| 00000ae0:·7 | 00000ae0:·7465·642e·0a0a·5468·6520·666f·6c6c·6f77··ted...The·follow | ||
| 00000af0:· | 00000af0:·696e·6720·7275·6c65·7320·636f·6e66·6967··ing·rules·config | ||
| 00000b00:· | 00000b00:·7572·6520·6175·6469·7420·6173·2064·6573··ure·audit·as·des | ||
| 00000b10:· | 00000b10:·6372·6962·6564·2061·626f·7665·3a0a·3c70··cribed·above:.<p | ||
| 00000b20:· | 00000b20:·7265·3e23·2320·556e·7375·6363·6573·7366··re>##·Unsuccessf | ||
| 00000b30:· | 00000b30:·756c·2066·696c·6520·6372·6561·7469·6f6e··ul·file·creation | ||
| 00000b40:·202 | 00000b40:·2028·6f70·656e·2077·6974·6820·4f5f·4352···(open·with·O_CR | ||
| 00000b50:· | 00000b50:·4541·5429·0a2d·6120·616c·7761·7973·2c65··EAT).-a·always,e | ||
| 00000b60:·7 | 00000b60:·7869·7420·2d46·2061·7263·683d·6233·3220··xit·-F·arch=b32· | ||
| 00000b70:· | 00000b70:·2d53·206f·7065·6e61·742c·6f70·656e·5f62··-S·openat,open_b | ||
| 00000b80:· | 00000b80:·795f·6861·6e64·6c65·5f61·7420·2d46·2061··y_handle_at·-F·a | ||
| 00000b90:· | 00000b90:·3226·616d·703b·3031·3030·202d·4620·6578··2&0100·-F·ex | ||
| 00000ba0:· | 00000ba0:·6974·3d2d·4541·4343·4553·202d·4620·6175··it=-EACCES·-F·au | ||
| 00000bb0:· | 00000bb0:·6964·3e3d·3130·3030·202d·4620·6175·6964··id>=1000·-F·auid | ||
| Max diff block lines reached; 7288087/7423491 bytes (98.18%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 26 lines modified | Offset 157, 24 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Install·iptables·Package</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | netwo | 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 167 | <pre> | ||
| 168 | $·sudo·yum·install·iptables</pre> | ||
| 169 | ······</td> | 169 | ······</td> |
| 170 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | masquerading,·etc. | ||
| 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 176 | ······</td> | 174 | ······</td> |
| 177 | ····</tr> | 175 | ····</tr> |
| 178 | ····<tr> | 176 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 177 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 181 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| Offset 189, 24 lines modified | Offset 187, 26 lines modified | ||
| 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 191 | enables·the·system·to·continue·servicing·valid·connection·requests. | 189 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 192 | ······</td> | 190 | ······</td> |
| 193 | ····</tr> | 191 | ····</tr> |
| 194 | ····<tr> | 192 | ····<tr> |
| 195 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 196 | ······<td> | 194 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 197 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 199 | <pre> | ||
| 200 | 196 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | network. | ||
| 201 | ······</td> | 199 | ······</td> |
| 202 | ······<td·xml:lang="en-US"> | 200 | ······<td·xml:lang="en-US"> |
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | |
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | anti-spoofing·measure. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 40 lines modified | Offset 246, 23 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| Max diff block lines reached; 296404/302247 bytes (98.07%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 31 lines modified | Offset 112, 23 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 121 | ····················································································p | 119 | ····················································································iptables·controls |
| 122 | ···················································································· | 120 | ····················································································the·Linux·kernel |
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 125 | ····················································································system.·The | ||
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 129 | ····················································································network· | 121 | ····················································································network·packet |
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 130 | ····················································································s | 125 | ····················································································set·up·firewalls |
| 131 | ····················································································other·interfaces | ||
| 132 | ···················································································· | 126 | ····················································································and·IP |
| 133 | ····················································································traffic·on·this | ||
| 134 | ····················································································network·as·an·anti- | ||
| 135 | ····················································································s | 127 | ····················································································masquerading,·etc. |
| 136 | ····················································································A·TCP·SYN·flood | 128 | ····················································································A·TCP·SYN·flood |
| 137 | ····················································································attack·can·cause·a | 129 | ····················································································attack·can·cause·a |
| 138 | ····················································································denial·of·service | 130 | ····················································································denial·of·service |
| 139 | ····················································································by·filling·a | 131 | ····················································································by·filling·a |
| 140 | ····················································································system's·TCP | 132 | ····················································································system's·TCP |
| 141 | ····················································································connection·table | 133 | ····················································································connection·table |
| 142 | ····················································································with·connections·in | 134 | ····················································································with·connections·in |
| Offset 155, 23 lines modified | Offset 147, 31 lines modified | ||
| 155 | ····················································································flood·condition·is | 147 | ····················································································flood·condition·is |
| 156 | ····················································································detected,·and | 148 | ····················································································detected,·and |
| 157 | ····················································································enables·the·system | 149 | ····················································································enables·the·system |
| 158 | ····················································································to·continue | 150 | ····················································································to·continue |
| 159 | ····················································································servicing·valid | 151 | ····················································································servicing·valid |
| 160 | ····················································································connection | 152 | ····················································································connection |
| 161 | ····················································································requests. | 153 | ····················································································requests. |
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 162 | ···················································································· | 156 | ····················································································processes·on |
| 157 | ····················································································machine·and·is | ||
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 163 | ···················································································· | 160 | ····················································································system.·The |
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network· | 164 | ····················································································network·traffic |
| 165 | ····················································································should·be·seen,·all | ||
| 166 | ····················································································other·interfaces | ||
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 168 | ····················································································s | 167 | ····················································································should·ignore |
| 169 | ····················································································an | 168 | ····················································································traffic·on·this |
| 169 | ····················································································network·as·an·anti- | ||
| 170 | ···················································································· | 170 | ····················································································spoofing·measure. |
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 54 lines modified | Offset 187, 24 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| Max diff block lines reached; 481788/495375 bytes (97.26%) of diff not shown. | |||
| Offset 65, 14854 lines modified | Offset 65, 14854 lines modified | ||
| 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | 00000400:·3c2f·7468·3e0a·2020·2020·3c74·683e·5275··</th>.····<th>Ru | ||
| 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | 00000410:·6c65·2054·6974·6c65·3c2f·7468·3e0a·2020··le·Title</th>.·· | ||
| 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | 00000420:·2020·3c74·683e·4465·7363·7269·7074·696f····<th>Descriptio | ||
| 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | 00000430:·6e3c·2f74·683e·0a20·2020·203c·7468·3e52··n</th>.····<th>R | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | Diff chunk too large, falling back to line-by-line diff (4062 lines added, 4062 lines removed) | |
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·286 | 00000470:·3c74·643e·4155·2d32·2861·293c·2f74·643e··<td>AU-2(a)</td> | ||
| 00000480:· | 00000480:·0a20·2020·2020·203c·7464·3e43·6f6e·6669··.······<td>Confi | ||
| 00000490:· | 00000490:·6775·7265·2061·7564·6974·696e·6720·6f66··gure·auditing·of | ||
| 000004a0:· | 000004a0:·2075·6e73·7563·6365·7373·6675·6c20·6f77···unsuccessful·ow | ||
| 000004b0:· | 000004b0:·6e65·7273·6869·7020·6368·616e·6765·733c··nership·changes< | ||
| 000004c0:· | 000004c0:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | ||
| 000004d0:·6 | 000004d0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | ||
| 000004e0:· | 000004e0:·0a20·2020·2020·2020·2045·6e73·7572·6520··.········Ensure· | ||
| 000004f0:· | 000004f0:·7468·6174·2075·6e73·7563·6365·7373·6675··that·unsuccessfu | ||
| 00000500:·6 | 00000500:·6c20·6174·7465·6d70·7473·2074·6f20·6368··l·attempts·to·ch | ||
| 00000510:·6 | 00000510:·616e·6765·2061·6e20·6f77·6e65·7273·6869··ange·an·ownershi | ||
| 00000520:· | 00000520:·7020·6f66·2066·696c·6573·206f·7220·6469··p·of·files·or·di | ||
| 00000530:· | 00000530:·7265·6374·6f72·6965·7320·6172·6520·6175··rectories·are·au | ||
| 00000540:·6469·74 | 00000540:·6469·7465·642e·0a0a·5468·6520·666f·6c6c··dited...The·foll | ||
| 00000550:·6 | 00000550:·6f77·696e·6720·7275·6c65·7320·636f·6e66··owing·rules·conf | ||
| 00000560:·6 | 00000560:·6967·7572·6520·6175·6469·7420·6173·2064··igure·audit·as·d | ||
| 00000570:·6 | 00000570:·6573·6372·6962·6564·2061·626f·7665·3a0a··escribed·above:. | ||
| 00000580:· | 00000580:·3c70·7265·3e23·2320·556e·7375·6363·6573··<pre>##·Unsucces | ||
| 00000590:· | 00000590:·7366·756c·206f·776e·6572·7368·6970·2063··sful·ownership·c | ||
| 000005a0:· | 000005a0:·6861·6e67·650a·2d61·2061·6c77·6179·732c··hange.-a·always, | ||
| 000005b0:·65 | 000005b0:·6578·6974·202d·4620·6172·6368·3d62·3332··exit·-F·arch=b32 | ||
| 000005c0:· | 000005c0:·202d·5320·6c63·686f·776e·2c66·6368·6f77···-S·lchown,fchow | ||
| 000005d0:· | 000005d0:·6e2c·6368·6f77·6e2c·6663·686f·776e·6174··n,chown,fchownat | ||
| 000005e0:· | 000005e0:·202d·4620·6578·6974·3d2d·4541·4343·4553···-F·exit=-EACCES | ||
| 000005f0:· | 000005f0:·202d·4620·6175·6964·2667·743b·3d31·3030···-F·auid>=100 | ||
| 00000600:· | 00000600:·3020·2d46·2061·7569·6421·3d75·6e73·6574··0·-F·auid!=unset | ||
| 00000610:· | 00000610:·202d·4620·6b65·793d·756e·7375·6363·6573···-F·key=unsucces | ||
| 00000620:· | 00000620:·7366·756c·2d6f·776e·6572·2d63·6861·6e67··sful-owner-chang | ||
| 00000630:· | 00000630:·650a·2d61·2061·6c77·6179·732c·6578·6974··e.-a·always,exit | ||
| 00000640:· | 00000640:·202d·4620·6172·6368·3d62·3634·202d·5320···-F·arch=b64·-S· | ||
| 00000650:· | 00000650:·6c63·686f·776e·2c66·6368·6f77·6e2c·6368··lchown,fchown,ch | ||
| 00000660:·7 | 00000660:·6f77·6e2c·6663·686f·776e·6174·202d·4620··own,fchownat·-F· | ||
| 00000670:· | 00000670:·6578·6974·3d2d·4541·4343·4553·202d·4620··exit=-EACCES·-F· | ||
| 00000680:·6 | 00000680:·6175·6964·2667·743b·3d31·3030·3020·2d46··auid>=1000·-F | ||
| 00000690:· | 00000690:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 000006a0:·6 | 000006a0:·6b65·793d·756e·7375·6363·6573·7366·756c··key=unsuccessful | ||
| 000006b0:· | 000006b0:·2d6f·776e·6572·2d63·6861·6e67·650a·2d61··-owner-change.-a | ||
| 000006c0:·2 | 000006c0:·2061·6c77·6179·732c·6578·6974·202d·4620···always,exit·-F· | ||
| 000006d0:·736 | 000006d0:·6172·6368·3d62·3332·202d·5320·6c63·686f··arch=b32·-S·lcho | ||
| 000006e0:· | 000006e0:·776e·2c66·6368·6f77·6e2c·6368·6f77·6e2c··wn,fchown,chown, | ||
| 000006f0:·6 | 000006f0:·6663·686f·776e·6174·202d·4620·6578·6974··fchownat·-F·exit | ||
| 00000700:· | 00000700:·3d2d·4550·4552·4d20·2d46·2061·7569·6426··=-EPERM·-F·auid& | ||
| 00000710:·74 | 00000710:·6774·3b3d·3130·3030·202d·4620·6175·6964··gt;=1000·-F·auid | ||
| 00000720:· | 00000720:·213d·756e·7365·7420·2d46·206b·6579·3d75··!=unset·-F·key=u | ||
| 00000730:·6e | 00000730:·6e73·7563·6365·7373·6675·6c2d·6f77·6e65··nsuccessful-owne | ||
| 00000740:·7 | 00000740:·722d·6368·616e·6765·0a2d·6120·616c·7761··r-change.-a·alwa | ||
| 00000750:· | 00000750:·7973·2c65·7869·7420·2d46·2061·7263·683d··ys,exit·-F·arch= | ||
| 00000760:· | 00000760:·6236·3420·2d53·206c·6368·6f77·6e2c·6663··b64·-S·lchown,fc | ||
| 00000770:· | 00000770:·686f·776e·2c63·686f·776e·2c66·6368·6f77··hown,chown,fchow | ||
| 00000780:· | 00000780:·6e61·7420·2d46·2065·7869·743d·2d45·5045··nat·-F·exit=-EPE | ||
| 00000790:· | 00000790:·524d·202d·4620·6175·6964·2667·743b·3d31··RM·-F·auid>=1 | ||
| 000007a0:· | 000007a0:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 000007b0:· | 000007b0:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 000007c0:· | 000007c0:·6573·7366·756c·2d6f·776e·6572·2d63·6861··essful-owner-cha | ||
| 000007d0:· | 000007d0:·6e67·6520·2020·203c·2f70·7265·3e0a·0a4c··nge····</pre>..L | ||
| 000007e0:· | 000007e0:·6f61·6420·6e65·7720·4175·6469·7420·7275··oad·new·Audit·ru | ||
| 000007f0:·6 | 000007f0:·6c65·7320·696e·746f·206b·6572·6e65·6c20··les·into·kernel· | ||
| 00000800:· | 00000800:·6279·2072·756e·6e69·6e67·3a0a·3c70·7265··by·running:.<pre | ||
| 00000810:· | 00000810:·3e61·7567·656e·7275·6c65·7320·2d2d·6c6f··>augenrules·--lo | ||
| 00000820:· | 00000820:·6164·3c2f·7072·653e·0a0a·4e6f·7465·3a20··ad</pre>..Note:· | ||
| 00000830:· | 00000830:·5468·6973·2072·756c·6520·7573·6573·2061··This·rule·uses·a | ||
| 00000840:· | 00000840:·2073·7065·6369·616c·2073·6574·206f·6620···special·set·of· | ||
| 00000850:· | 00000850:·4175·6469·7420·7275·6c65·7320·746f·2063··Audit·rules·to·c | ||
| 00000860:·6 | 00000860:·6f6d·706c·7920·7769·7468·204f·5350·5020··omply·with·OSPP· | ||
| 00000870:· | 00000870:·342e·322e·312e·2059·6f75·206d·6179·2072··4.2.1.·You·may·r | ||
| 00000880:·7 | 00000880:·6575·7365·2074·6869·7320·7275·6c65·2069··euse·this·rule·i | ||
| 00000890:· | 00000890:·6e20·6469·6666·6572·656e·7420·7072·6f66··n·different·prof | ||
| 000008a0:·696 | 000008a0:·696c·6573·2e20·4966·2079·6f75·2064·6563··iles.·If·you·dec | ||
| 000008b0:·6 | 000008b0:·6964·6520·746f·2064·6f20·736f·2c20·6974··ide·to·do·so,·it | ||
| 000008c0:· | 000008c0:·2069·7320·7265·636f·6d6d·656e·6465·6420···is·recommended· | ||
| 000008d0:·6 | 000008d0:·7468·6174·2079·6f75·2069·6e73·7065·6374··that·you·inspect | ||
| 000008e0:· | 000008e0:·2063·6f6e·7465·6e74·7320·6f66·2074·6865···contents·of·the | ||
| 000008f0:· | 000008f0:·2066·696c·6520·636c·6f73·656c·7920·616e···file·closely·an | ||
| 00000900:·6 | 00000900:·6420·6d61·6b65·2073·7572·6520·7468·6174··d·make·sure·that | ||
| 00000910:· | 00000910:·2074·6865·7920·6172·6520·616c·6c69·676e···they·are·allign | ||
| 00000920:· | 00000920:·6564·2077·6974·6820·796f·7572·206e·6565··ed·with·your·nee | ||
| 00000930:·6 | 00000930:·6473·2e0a·2020·2020·2020·3c2f·7464·3e0a··ds..······</td>. | ||
| 00000940:·20 | 00000940:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 00000950:·6 | 00000950:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 00000960:· | 00000960:·2020·2020·556e·7375·6363·6573·7366·756c······Unsuccessful | ||
| 00000970:·6174·6 | 00000970:·2061·7474·656d·7074·7320·746f·2063·6861···attempts·to·cha | ||
| 00000980:· | 00000980:·6e67·6520·616e·206f·776e·6572·7368·6970··nge·an·ownership | ||
| 00000990:· | 00000990:·206f·6620·6669·6c65·7320·6f72·2064·6972···of·files·or·dir | ||
| 000009a0:· | 000009a0:·6563·746f·7269·6573·206d·6967·6874·2062··ectories·might·b | ||
| 000009b0:·65 | 000009b0:·6520·7369·676e·7320·6f66·2061·206d·616c··e·signs·of·a·mal | ||
| 000009c0:·6 | 000009c0:·6963·696f·7573·2061·6374·6976·6974·792e··icious·activity. | ||
| 000009d0:· | 000009d0:·2048·6176·696e·6720·7375·6368·2065·7665···Having·such·eve | ||
| 000009e0:·6 | 000009e0:·6e74·7320·6175·6469·7465·6420·6865·6c70··nts·audited·help | ||
| 000009f0:· | 000009f0:·7320·696e·206d·6f6e·6974·6f72·696e·6720··s·in·monitoring· | ||
| 00000a00:·6 | 00000a00:·616e·6420·696e·7665·7374·6967·6174·696f··and·investigatio | ||
| 00000a10:· | 00000a10:·6e20·6f66·2073·7563·6820·6163·7469·7669··n·of·such·activi | ||
| 00000a20:· | 00000a20:·7469·6573·2e0a·2020·2020·2020·3c2f·7464··ties..······</td | ||
| 00000a30:· | 00000a30:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 00000a40:· | 00000a40:·3c74·723e·0a20·2020·2020·203c·7464·3e41··<tr>.······<td>A | ||
| 00000a50:· | 00000a50:·552d·3228·6129·3c2f·7464·3e0a·2020·2020··U-2(a)</td>.···· | ||
| 00000a60:· | 00000a60:·2020·3c74·643e·436f·6e66·6967·7572·6520····<td>Configure· | ||
| 00000a70:· | 00000a70:·6175·6469·7469·6e67·206f·6620·756e·7375··auditing·of·unsu | ||
| 00000a80:·6 | 00000a80:·6363·6573·7366·756c·2066·696c·6520·6372··ccessful·file·cr | ||
| 00000a90:·6 | 00000a90:·6561·7469·6f6e·7320·2841·4172·6368·3634··eations·(AArch64 | ||
| 00000aa0:· | 00000aa0:·293c·2f74·643e·0a20·2020·2020·203c·7464··)</td>.······<td | ||
| 00000ab0:· | 00000ab0:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00000ac0:· | 00000ac0:·223e·0a20·2020·2020·2020·2045·6e73·7572··">.········Ensur | ||
| 00000ad0:·2074 | 00000ad0:·6520·7468·6174·2075·6e73·7563·6365·7373··e·that·unsuccess | ||
| 00000ae0:·6520· | 00000ae0:·6675·6c20·6174·7465·6d70·7473·2074·6f20··ful·attempts·to· | ||
| 00000af0:·6 | 00000af0:·6372·6561·7465·2061·2066·696c·6520·6172··create·a·file·ar | ||
| 00000b00:· | 00000b00:·6520·6175·6469·7465·642e·0a0a·5468·6520··e·audited...The· | ||
| 00000b10:· | 00000b10:·666f·6c6c·6f77·696e·6720·7275·6c65·7320··following·rules· | ||
| 00000b20:· | 00000b20:·636f·6e66·6967·7572·6520·6175·6469·7420··configure·audit· | ||
| 00000b30:· | 00000b30:·6173·2064·6573·6372·6962·6564·2061·626f··as·described·abo | ||
| 00000b40:·7 | 00000b40:·7665·3a0a·3c70·7265·3e23·2320·556e·7375··ve:.<pre>##·Unsu | ||
| 00000b50:· | 00000b50:·6363·6573·7366·756c·2066·696c·6520·6372··ccessful·file·cr | ||
| 00000b60:· | 00000b60:·6561·7469·6f6e·2028·6f70·656e·2077·6974··eation·(open·wit | ||
| 00000b70:·6 | 00000b70:·6820·4f5f·4352·4541·5429·0a2d·6120·616c··h·O_CREAT).-a·al | ||
| 00000b80:· | 00000b80:·7761·7973·2c65·7869·7420·2d46·2061·7263··ways,exit·-F·arc | ||
| 00000b90:·6 | 00000b90:·683d·6233·3220·2d53·206f·7065·6e61·742c··h=b32·-S·openat, | ||
| 00000ba0:· | 00000ba0:·6f70·656e·5f62·795f·6861·6e64·6c65·5f61··open_by_handle_a | ||
| 00000bb0:· | 00000bb0:·7420·2d46·2061·3226·616d·703b·3031·3030··t·-F·a2&0100 | ||
| 00000bc0:· | 00000bc0:·202d·4620·6578·6974·3d2d·4541·4343·4553···-F·exit=-EACCES | ||
| 00000bd0:·202 | 00000bd0:·202d·4620·6175·6964·3e3d·3130·3030·202d···-F·auid>=1000·- | ||
| Max diff block lines reached; 7280637/7841771 bytes (92.84%) of diff not shown. | |||
| Offset 65, 273 lines modified | Offset 65, 273 lines modified | ||
| 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | ||
| 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | ||
| 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | ||
| 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | ||
| 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | ||
| 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | ||
| 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | ||
| 00000470:·7265·2053·4d4 | 00000470:·7265·2053·4d41·5020·6973·206e·6f74·2064··re·SMAP·is·not·d | ||
| 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | ||
| 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | ||
| 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 000004c0:·2053·4d4 | 000004c0:·2053·4d41·5020·6973·2075·7365·6420·746f···SMAP·is·used·to | ||
| 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | ||
| 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | ||
| 000004f0:·6d20·6578·6563·7574·696e·6720·7573·6572··m·executing·user | |||
| 00000500:·2073·7061·6365·2063·6f64·652c·0a69·7420···space·code,.it· | |||
| 00000510:·6973·2065·6e61·626c·6564·2062·7920·6465··is·enabled·by·de | |||
| 00000520:·6661·756c·7420·7369·6e63·6520·4c69·6e75··fault·since·Linu | |||
| 00000530:·7820·6b65·726e·656c·2033·2e30·2e20·4275··x·kernel·3.0.·Bu | |||
| 00000540:·7420·6974·2063·6f75·6c64·2062·6520·6469··t·it·could·be·di | |||
| 00000550:·7361·626c·6564·2074·6872·6f75·6768·0a6b··sabled·through.k | |||
| 00000560:·6572·6e65·6c20·626f·6f74·2070·6172·616d··ernel·boot·param | |||
| 00000570:·6574·6572·732e·0a0a·456e·7375·7265·2074··eters...Ensure·t | |||
| 00000580:·6861·7420·5375·7065·7276·6973·6f72·204d··hat·Supervisor·M | |||
| 00000590:·6f64·6520·4578·6563·7574·696f·6e20·5072··ode·Execution·Pr | |||
| 000005a0:·6576·656e·7469·6f6e·2028·534d·4550·2920··evention·(SMEP)· | |||
| 000005b0:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 000005c0:·6279·0a74·6865·203c·7474·3e6e·6f73·6d65··by.the·<tt>nosme | |||
| 000005d0:·703c·2f74·743e·2062·6f6f·7420·7061·7261··p</tt>·boot·para | |||
| 000005e0:·6d65·6e74·6572·206f·7074·696f·6e2e·0a0a··menter·option... | |||
| 000005f0:·4368·6563·6b20·7468·6174·2074·6865·206c··Check·that·the·l | |||
| 00000600:·696e·6520·3c70·7265·3e47·5255·425f·434d··ine·<pre>GRUB_CM | |||
| 00000610:·444c·494e·455f·4c49·4e55·583d·222e·2e2e··DLINE_LINUX="... | |||
| 00000620:·223c·2f70·7265·3e20·7769·7468·696e·203c··"</pre>·within·< | |||
| 00000630:·7474·3e2f·6574·632f·6465·6661·756c·742f··tt>/etc/default/ | |||
| 00000640:·6772·7562·3c2f·7474·3e0a·646f·6573·6e27··grub</tt>.doesn' | |||
| 00000650:·7420·636f·6e74·6169·6e20·7468·6520·6172··t·contain·the·ar | |||
| 00000660:·6775·6d65·6e74·203c·7474·3e6e·6f73·6d65··gument·<tt>nosme | |||
| 00000670:·703c·2f74·743e·2e0a·5275·6e20·7468·6520··p</tt>..Run·the· | |||
| 00000680:·666f·6c6c·6f77·696e·6720·636f·6d6d·616e··following·comman | |||
| 00000690:·6420·746f·2075·7064·6174·6520·636f·6d6d··d·to·update·comm | |||
| 000006a0:·616e·6420·6c69·6e65·2066·6f72·2061·6c72··and·line·for·alr | |||
| 000006b0:·6561·6479·2069·6e73·7461·6c6c·6564·206b··eady·installed·k | |||
| 000006c0:·6572·6e65·6c73·3a0a·3c70·7265·3e23·2067··ernels:.<pre>#·g | |||
| 000006d0:·7275·6262·7920·2d2d·7570·6461·7465·2d6b··rubby·--update-k | |||
| 000006e0:·6572·6e65·6c3d·414c·4c20·2d2d·7265·6d6f··ernel=ALL·--remo | |||
| 00000 | 000004f0:·6d20·756e·696e·7465·6e74·696f·6e61·6c6c··m·unintentionall | ||
| 00000500:·7920·7265·6164·696e·672f·7772·6974·696e··y·reading/writin | |||
| 00000510:·6720·696e·746f·0a6d·656d·6f72·7920·7061··g·into.memory·pa | |||
| 00000520:·6765·7320·696e·2074·6865·2075·7365·7220··ges·in·the·user· | |||
| 00000530:·7370·6163·652c·2069·7420·6973·2065·6e61··space,·it·is·ena | |||
| 00000540:·626c·6564·2062·7920·6465·6661·756c·7420··bled·by·default· | |||
| 00000550:·7369·6e63·6520·4c69·6e75·7820·6b65·726e··since·Linux·kern | |||
| 00000560:·656c·2033·2e37·2e0a·4275·7420·6974·2063··el·3.7..But·it·c | |||
| 00000570:·6f75·6c64·2062·6520·6469·7361·626c·6564··ould·be·disabled | |||
| 00000580:·2074·6872·6f75·6768·206b·6572·6e65·6c20···through·kernel· | |||
| 00000590:·626f·6f74·2070·6172·616d·6574·6572·732e··boot·parameters. | |||
| 000005a0:·0a0a·456e·7375·7265·2074·6861·7420·5375··..Ensure·that·Su | |||
| 000005b0:·7065·7276·6973·6f72·204d·6f64·6520·4163··pervisor·Mode·Ac | |||
| 000005c0:·6365·7373·2050·7265·7665·6e74·696f·6e20··cess·Prevention· | |||
| 000005d0:·2853·4d41·5029·2069·7320·6e6f·7420·6469··(SMAP)·is·not·di | |||
| 000005e0:·7361·626c·6564·2062·790a·7468·6520·3c74··sabled·by.the·<t | |||
| 000005f0:·743e·6e6f·736d·6170·3c2f·7474·3e20·626f··t>nosmap</tt>·bo | |||
| 00000600:·6f74·2070·6172·616d·656e·7465·7220·6f70··ot·paramenter·op | |||
| 00000610:·7469·6f6e·2e0a·0a43·6865·636b·2074·6861··tion...Check·tha | |||
| 00000620:·7420·7468·6520·6c69·6e65·203c·7072·653e··t·the·line·<pre> | |||
| 00000630:·4752·5542·5f43·4d44·4c49·4e45·5f4c·494e··GRUB_CMDLINE_LIN | |||
| 00000640:·5558·3d22·2e2e·2e22·3c2f·7072·653e·2077··UX="..."</pre>·w | |||
| 00000650:·6974·6869·6e20·3c74·743e·2f65·7463·2f64··ithin·<tt>/etc/d | |||
| 00000660:·6566·6175·6c74·2f67·7275·623c·2f74·743e··efault/grub</tt> | |||
| 00000670:·0a64·6f65·736e·2774·2063·6f6e·7461·696e··.doesn't·contain | |||
| 00000680:·2074·6865·2061·7267·756d·656e·7420·3c74···the·argument·<t | |||
| 00000690:·743e·6e6f·736d·6170·3c2f·7474·3e2e·0a52··t>nosmap</tt>..R | |||
| 000006a0:·756e·2074·6865·2066·6f6c·6c6f·7769·6e67··un·the·following | |||
| 000006b0:·2063·6f6d·6d61·6e64·2074·6f20·7570·6461···command·to·upda | |||
| 000006c0:·7465·2063·6f6d·6d61·6e64·206c·696e·6520··te·command·line· | |||
| 000006d0:·666f·7220·616c·7265·6164·7920·696e·7374··for·already·inst | |||
| 000006e0:·616c·6c65·6420·6b65·726e·656c·733a·0a3c··alled·kernels:.< | |||
| 000006f0:·7072·653e·2320·6772·7562·6279·202d·2d75··pre>#·grubby·--u | |||
| 00000700:·7064·6174·652d·6b65·726e·656c·3d41·4c4c··pdate-kernel=ALL | |||
| 00000710:·202d·2d72·656d·6f76·652d·6172·6773·3d22···--remove-args=" | |||
| 00000720:·6e6f·736d·6170·223c·2f70·7265·3e0a·2020··nosmap"</pre>.·· | |||
| 00000730:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000740:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000750:·2d55·5322·3e0a·2020·2020·2020·2020·4469··-US">.········Di | |||
| 00000760:·7361·626c·696e·6720·534d·4150·2063·616e··sabling·SMAP·can | |||
| 00000770:·2066·6163·696c·6974·6174·6520·6578·706c···facilitate·expl | |||
| 00000780:·6f69·7461·7469·6f6e·206f·6620·7675·6c6e··oitation·of·vuln | |||
| 00000790:·6572·6162·696c·6974·6965·7320·6361·7573··erabilities·caus | |||
| 000007a0:·6564·2062·7920·756e·696e·7465·6e64·6564··ed·by·unintended | |||
| 000007b0:·2061·6363·6573·7320·616e·640a·6d61·6e69···access·and.mani | |||
| 000007c0:·7075·6c61·7469·6f6e·206f·6620·6461·7461··pulation·of·data | |||
| 000007d0:·2069·6e20·7468·6520·7573·6572·2073·7061···in·the·user·spa | |||
| 000007e0:·6365·2e0a·2020·2020·2020·3c2f·7464·3e0a··ce..······</td>. | |||
| 000007f0:·2020·2020·3c2f·7472·3e0a·2020·2020·3c74······</tr>.····<t | |||
| 00000800:·723e·0a20·2020·2020·203c·7464·3e52·313c··r>.······<td>R1< | |||
| 00000810:·2f74·643e·0a20·2020·2020·203c·7464·3e45··/td>.······<td>E | |||
| 00000820:·6e73·7572·6520·534d·4550·2069·7320·6e6f··nsure·SMEP·is·no | |||
| 00000830:·7420·6469·7361·626c·6564·2064·7572·696e··t·disabled·durin | |||
| 00000840:·6720·626f·6f74·3c2f·7464·3e0a·2020·2020··g·boot</td>.···· | |||
| 00000850:·2020·3c74·6420·786d·6c3a·6c61·6e67·3d22····<td·xml:lang=" | |||
| 00000860:·656e·2d55·5322·3e0a·2020·2020·2020·2020··en-US">.········ | |||
| 00000870:·5468·6520·534d·4550·2069·7320·7573·6564··The·SMEP·is·used | |||
| 00000880:·2074·6f20·7072·6576·656e·7420·7468·6520···to·prevent·the· | |||
| 00000890:·7375·7065·7276·6973·6f72·206d·6f64·6520··supervisor·mode· | |||
| 000008a0:·6672·6f6d·2065·7865·6375·7469·6e67·2075··from·executing·u | |||
| 000008b0:·7365·7220·7370·6163·6520·636f·6465·2c0a··ser·space·code,. | |||
| 000008c0:·6974·2069·7320·656e·6162·6c65·6420·6279··it·is·enabled·by | |||
| 000008d0:·2064·6566·6175·6c74·2073·696e·6365·204c···default·since·L | |||
| 000008e0:·696e·7578·206b·6572·6e65·6c20·332e·302e··inux·kernel·3.0. | |||
| 000008f0:·2042·7574·2069·7420·636f·756c·6420·6265···But·it·could·be | |||
| 00000900:·2064·6973·6162·6c65·6420·7468·726f·7567···disabled·throug | |||
| 00000910:·680a·6b65·726e·656c·2062·6f6f·7420·7061··h.kernel·boot·pa | |||
| 00000920:·7261·6d65·7465·7273·2e0a·0a45·6e73·7572··rameters...Ensur | |||
| 00000930:·6520·7468·6174·2053·7570·6572·7669·736f··e·that·Superviso | |||
| 00000940:·7220·4d6f·6465·2045·7865·6375·7469·6f6e··r·Mode·Execution | |||
| 00000950:·2050·7265·7665·6e74·696f·6e20·2853·4d45···Prevention·(SME | |||
| 00000960:·5029·2069·7320·6e6f·7420·6469·7361·626c··P)·is·not·disabl | |||
| 00000970:·6564·2062·790a·7468·6520·3c74·743e·6e6f··ed·by.the·<tt>no | |||
| 00000980:·736d·6570·3c2f·7474·3e20·626f·6f74·2070··smep</tt>·boot·p | |||
| 00000990:·6172·616d·656e·7465·7220·6f70·7469·6f6e··aramenter·option | |||
| 000009a0:·2e0a·0a43·6865·636b·2074·6861·7420·7468··...Check·that·th | |||
| 000009b0:·6520·6c69·6e65·203c·7072·653e·4752·5542··e·line·<pre>GRUB | |||
| 000009c0:·5f43·4d44·4c49·4e45·5f4c·494e·5558·3d22··_CMDLINE_LINUX=" | |||
| 000009d0:·2e2e·2e22·3c2f·7072·653e·2077·6974·6869··..."</pre>·withi | |||
| 000009e0:·6e20·3c74·743e·2f65·7463·2f64·6566·6175··n·<tt>/etc/defau | |||
| Max diff block lines reached; 3004386/3040288 bytes (98.82%) of diff not shown. | |||
| Offset 1, 13 lines modified | Offset 1, 29 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Red·Hat |
| 2 | Enterprise·Linux·8 | 2 | Enterprise·Linux·8 |
| 3 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 4 | ······························mode·from·unintentionally·reading/writing | ||
| 5 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 6 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 7 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 8 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 9 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 10 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 11 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 12 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 13 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 14 | ······························argument·nosmap.·Run·the·following·command | ||
| 15 | ······························to·update·command·line·for·already·installed | ||
| 16 | ······························kernels: | ||
| 17 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 18 | ······························args="nosmap" | ||
| 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor | 19 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 4 | ······························mode·from·executing·user·space·code,·it·is | 20 | ······························mode·from·executing·user·space·code,·it·is |
| 5 | ······························enabled·by·default·since·Linux·kernel·3.0. | 21 | ······························enabled·by·default·since·Linux·kernel·3.0. |
| 6 | ······························But·it·could·be·disabled·through·kernel·boot | 22 | ······························But·it·could·be·disabled·through·kernel·boot |
| 7 | ······························parameters.·Ensure·that·Supervisor·Mode | 23 | ······························parameters.·Ensure·that·Supervisor·Mode |
| 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | 24 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate |
| 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | 25 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain |
| Offset 15, 14 lines modified | Offset 31, 21 lines modified | ||
| 15 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | 31 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code |
| 16 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | 32 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. |
| 17 | ······························argument·nosmep.·Run·the·following·command | 33 | ······························argument·nosmep.·Run·the·following·command |
| 18 | ······························to·update·command·line·for·already·installed | 34 | ······························to·update·command·line·for·already·installed |
| 19 | ······························kernels: | 35 | ······························kernels: |
| 20 | ······························#·grubby·--update-kernel=ALL·--remove- | 36 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 21 | ······························args="nosmep" | 37 | ······························args="nosmep" |
| 38 | ···········································································Use·of·a·64-bit·operating·system | ||
| 39 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 40 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 41 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 42 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 43 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 44 | ···········································································bits. | ||
| 22 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 45 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 23 | ······························package·do·not·need·to·install·the·kernel- | 46 | ······························package·do·not·need·to·install·the·kernel- |
| 24 | ······························PAE·package·because·the·64-bit·x86·kernel | 47 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 25 | ······························already·includes·this·support.·However,·if | 48 | ······························already·includes·this·support.·However,·if |
| 26 | ······························the·system·is·32-bit·and·also·supports·the | 49 | ······························the·system·is·32-bit·and·also·supports·the |
| 27 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 50 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 28 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 51 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 39, 37 lines modified | Offset 62, 14 lines modified | ||
| 39 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 62 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 40 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 63 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 41 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 64 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 42 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 65 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 43 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 66 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| 44 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and | 67 | ······························$·sudo·yum·install·dracut-fips-aesni·········assurance·they·have·been·tested·and |
| 45 | ···········································································validated. | 68 | ···········································································validated. |
| 46 | ······························The·SMAP·is·used·to·prevent·the·supervisor | ||
| 47 | ······························mode·from·unintentionally·reading/writing | ||
| 48 | ······························into·memory·pages·in·the·user·space,·it·is | ||
| 49 | ······························enabled·by·default·since·Linux·kernel·3.7. | ||
| 50 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 51 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 52 | ······························Access·Prevention·(SMAP)·is·not·disabled·by··Disabling·SMAP·can·facilitate | ||
| 53 | R1··Ensure·SMAP·is·not········the·nosmap·boot·paramenter·option.·Check·····exploitation·of·vulnerabilities·caused | ||
| 54 | ····disabled·during·boot······that·the·line································by·unintended·access·and·manipulation | ||
| 55 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | ||
| 56 | ······························within·/etc/default/grub·doesn't·contain·the | ||
| 57 | ······························argument·nosmap.·Run·the·following·command | ||
| 58 | ······························to·update·command·line·for·already·installed | ||
| 59 | ······························kernels: | ||
| 60 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 61 | ······························args="nosmap" | ||
| 62 | ···········································································Use·of·a·64-bit·operating·system | ||
| 63 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 64 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 65 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 66 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 67 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 68 | ···········································································bits. | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·Boot·Loader·Password··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··in·grub2··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 99, 14 lines modified | Offset 99, 125 lines modified | ||
| 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. | 99 | ······························systems.·Modify·the·line·within·/etc/········hardware·devices. |
| 100 | ······························default/grub·as·shown·below: | 100 | ······························default/grub·as·shown·below: |
| 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." | 101 | ······························GRUB_CMDLINE_LINUX="...·iommu=force·..." |
| 102 | ······························Run·the·following·command·to·update·command | 102 | ······························Run·the·following·command·to·update·command |
| 103 | ······························line·for·already·installed·kernels: | 103 | ······························line·for·already·installed·kernels: |
| 104 | ······························#·grubby·--update-kernel=ALL·-- | 104 | ······························#·grubby·--update-kernel=ALL·-- |
| 105 | ······························args="iommu=force" | 105 | ······························args="iommu=force" |
| 106 | ······························To·enable·poisoning·of·SLUB/SLAB·objects, | ||
| 107 | ······························add·the·argument·slub_debug=P·to·the·default | ||
| 108 | ······························GRUB·2·command·line·for·the·Linux·operating··Poisoning·writes·an·arbitrary·value·to | ||
| 109 | ······························system.·To·ensure·that·slub_debug=P·is·added·freed·objects,·so·any·modification·or | ||
| 110 | ······························as·a·kernel·command·line·argument·to·newly···reference·to·that·object·after·being | ||
| 111 | ······························installed·kernels,·add·slub_debug=P·to·the···freed·or·before·being·initialized·will | ||
| 112 | R8··Enable·SLUB/SLAB··········default·Grub2·command·line·for·Linux·········be·detected·and·prevented.·This | ||
| 113 | ····allocator·poisoning·······operating·systems.·Modify·the·line·within·/··prevents·many·types·of·use-after-free | ||
| 114 | ······························etc/default/grub·as·shown·below:·············vulnerabilities·at·little·performance | ||
| 115 | ······························GRUB_CMDLINE_LINUX="...·slub_debug=P·..."····cost.·Also·prevents·leak·of·data·and | ||
| 116 | ······························Run·the·following·command·to·update·command··detection·of·corrupted·memory. | ||
| 117 | ······························line·for·already·installed·kernels: | ||
| 118 | ······························#·grubby·--update-kernel=ALL·-- | ||
| 119 | ······························args="slub_debug=P" | ||
| 120 | ······························The·kernel·may·merge·similar·slabs·together | ||
| 121 | ······························to·reduce·overhead·and·increase·cache | ||
| 122 | ······························hotness·of·objects.·Disabling·merging·of | ||
| 123 | ······························slabs·keeps·the·slabs·separate·and·reduces | ||
| 124 | ······························the·risk·of·kernel·heap·overflows | ||
| 125 | ······························overwriting·objects·in·merged·caches.·To·····Disabling·the·merge·of·slabs·of | ||
| 126 | ······························disable·merging·of·slabs·in·the·Kernel·add···similar·sizes·prevents·the·kernel·from | ||
| 127 | ······························the·argument·slab_nomerge=yes·to·the·default·merging·a·seemingly·useless·but | ||
| 128 | ······························GRUB·2·command·line·for·the·Linux·operating··vulnerable·slab·with·a·useful·and | ||
| 129 | ······························system.·To·ensure·that·slab_nomerge=yes·is···valuable·slab.·This·increase·the·risk | ||
| 130 | R8··Disable·merging·of·slabs··added·as·a·kernel·command·line·argument·to···that·a·heap·overflow·could·overwrite | ||
| 131 | ····with·similar·size·········newly·installed·kernels,·add·················objects·from·merged·caches,·with | ||
| 132 | ······························slab_nomerge=yes·to·the·default·Grub2········unmerged·caches·the·heap·overflow | ||
| 133 | ······························command·line·for·Linux·operating·systems.····would·only·affect·the·objects·in·the | ||
| 134 | ······························Modify·the·line·within·/etc/default/grub·as··same·cache.·Overall,·this·reduces·the | ||
| 135 | ······························shown·below:·································kernel·attack·surface·area·by | ||
| Max diff block lines reached; 673924/691963 bytes (97.39%) of diff not shown. | |||
| Offset 1844, 463 lines modified | Offset 1844, 463 lines modified | ||
| 00007330:·2075·7365·2c0a·616e·6420·7768·6574·6865···use,.and·whethe | 00007330:·2075·7365·2c0a·616e·6420·7768·6574·6865···use,.and·whethe | ||
| 00007340:·7220·746f·2065·6e74·6572·2073·696e·676c··r·to·enter·singl | 00007340:·7220·746f·2065·6e74·6572·2073·696e·676c··r·to·enter·singl | ||
| 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | 00007350:·652d·7573·6572·206d·6f64·652e·0a20·2020··e-user·mode..··· | ||
| 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | 00007360:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | 00007370:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | 00007380:·2020·3c74·643e·312e·332e·323c·2f74·643e····<td>1.3.2</td> | Diff chunk too large, falling back to line-by-line diff (449 lines added, 449 lines removed) | |
| 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | 00007390:·0a20·2020·2020·203c·7464·3e56·6572·6966··.······<td>Verif | ||
| 000073a0:·7920·2f62·6f6f·742f·6 | 000073a0:·7920·2f62·6f6f·742f·6772·7562·322f·7573··y·/boot/grub2/us | ||
| 000073b0:· | 000073b0:·6572·2e63·6667·2055·7365·7220·4f77·6e65··er.cfg·User·Owne | ||
| 000073c0:· | 000073c0:·7273·6869·703c·2f74·643e·0a20·2020·2020··rship</td>.····· | ||
| 000073d0:· | 000073d0:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 000073e0:·6 | 000073e0:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | ||
| 000073f0:· | 000073f0:·6865·2066·696c·6520·3c74·743e·2f62·6f6f··he·file·<tt>/boo | ||
| 00007400:·2 | 00007400:·742f·6772·7562·322f·7573·6572·2e63·6667··t/grub2/user.cfg | ||
| 00007410:· | 00007410:·3c2f·7474·3e20·7368·6f75·6c64·2062·6520··</tt>·should·be· | ||
| 00007420:·6 | 00007420:·6f77·6e65·6420·6279·2074·6865·203c·7474··owned·by·the·<tt | ||
| 00007430:· | 00007430:·3e72·6f6f·743c·2f74·743e·0a75·7365·7220··>root</tt>.user· | ||
| 00007440:·74 | 00007440:·746f·2070·7265·7665·6e74·2072·6561·6469··to·prevent·readi | ||
| 00007450:· | 00007450:·6e67·206f·7220·6d6f·6469·6669·6361·7469··ng·or·modificati | ||
| 00007460:·6 | 00007460:·6f6e·206f·6620·7468·6520·6669·6c65·2e0a··on·of·the·file.. | ||
| 00007470:· | 00007470:·0a54·6f20·7072·6f70·6572·6c79·2073·6574··.To·properly·set | ||
| 00007480:·2 | 00007480:·2074·6865·206f·776e·6572·206f·6620·3c63···the·owner·of·<c | ||
| 00007490:·6 | 00007490:·6f64·653e·2f62·6f6f·742f·6772·7562·322f··ode>/boot/grub2/ | ||
| 000074a0:· | 000074a0:·7573·6572·2e63·6667·3c2f·636f·6465·3e2c··user.cfg</code>, | ||
| 000074b0:· | 000074b0:·2072·756e·2074·6865·2063·6f6d·6d61·6e64···run·the·command | ||
| 000074c0:· | 000074c0:·3a0a·3c70·7265·3e24·2073·7564·6f20·6368··:.<pre>$·sudo·ch | ||
| 000074d0:· | 000074d0:·6f77·6e20·726f·6f74·202f·626f·6f74·2f67··own·root·/boot/g | ||
| 000074e0:· | 000074e0:·7275·6232·2f75·7365·722e·6366·6720·3c2f··rub2/user.cfg·</ | ||
| 000074f0:· | 000074f0:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 00007500:· | 00007500:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00007510:·6 | 00007510:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00007520:·2 | 00007520:·2020·2020·204f·6e6c·7920·726f·6f74·2073·······Only·root·s | ||
| 00007530:·6 | 00007530:·686f·756c·6420·6265·2061·626c·6520·746f··hould·be·able·to | ||
| 00007540:· | 00007540:·206d·6f64·6966·7920·696d·706f·7274·616e···modify·importan | ||
| 00007550:· | 00007550:·7420·626f·6f74·2070·6172·616d·6574·6572··t·boot·parameter | ||
| 00007560:· | 00007560:·732e·2041·6c73·6f2c·206e·6f6e·2d72·6f6f··s.·Also,·non-roo | ||
| 00007570:·727 | 00007570:·7420·7573·6572·7320·7768·6f20·7265·6164··t·users·who·read | ||
| 00007580:· | 00007580:·0a74·6865·2062·6f6f·7420·7061·7261·6d65··.the·boot·parame | ||
| 00007590:· | 00007590:·7465·7273·206d·6179·2062·6520·6162·6c65··ters·may·be·able | ||
| 000075a0:· | 000075a0:·2074·6f20·6964·656e·7469·6679·2077·6561···to·identify·wea | ||
| 000075b0:· | 000075b0:·6b6e·6573·7365·7320·696e·2073·6563·7572··knesses·in·secur | ||
| 000075c0:·6 | 000075c0:·6974·7920·7570·6f6e·2062·6f6f·7420·616e··ity·upon·boot·an | ||
| 000075d0:·20 | 000075d0:·6420·6265·2061·626c·6520·746f·0a65·7870··d·be·able·to.exp | ||
| 000075e0:·6 | 000075e0:·6c6f·6974·2074·6865·6d2e·0a20·2020·2020··loit·them..····· | ||
| 000075f0:· | 000075f0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | ||
| 00007600:·0a | 00007600:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | ||
| 00007610:· | 00007610:·3c74·643e·312e·332e·323c·2f74·643e·0a20··<td>1.3.2</td>.· | ||
| 00007620:·2 | 00007620:·2020·2020·203c·7464·3e56·6572·6966·7920·······<td>Verify· | ||
| 00007630:· | 00007630:·7468·6520·5545·4649·2042·6f6f·7420·4c6f··the·UEFI·Boot·Lo | ||
| 00007640:·6 | 00007640:·6164·6572·2067·7275·622e·6366·6720·4772··ader·grub.cfg·Gr | ||
| 00007650:·6 | 00007650:·6f75·7020·4f77·6e65·7273·6869·703c·2f74··oup·Ownership</t | ||
| 00007660:· | 00007660:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | ||
| 00007670:· | 00007670:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | ||
| 00007680:· | 00007680:·2020·2020·2020·2054·6865·2066·696c·6520·········The·file· | ||
| 00007690:·3 | 00007690:·3c74·743e·2f62·6f6f·742f·6566·692f·4546··<tt>/boot/efi/EF | ||
| 000076a0:· | 000076a0:·492f·7265·6468·6174·2f67·7275·622e·6366··I/redhat/grub.cf | ||
| 000076b0:·6 | 000076b0:·673c·2f74·743e·2073·686f·756c·640a·6265··g</tt>·should.be | ||
| 000076c0:·2 | 000076c0:·2067·726f·7570·2d6f·776e·6564·2062·7920···group-owned·by· | ||
| 000076d0:· | 000076d0:·7468·6520·3c74·743e·726f·6f74·3c2f·7474··the·<tt>root</tt | ||
| 000076e0:· | 000076e0:·3e20·6772·6f75·7020·746f·2070·7265·7665··>·group·to·preve | ||
| 000076f0:· | 000076f0:·6e74·0a64·6573·7472·7563·7469·6f6e·206f··nt.destruction·o | ||
| 00007700:·7 | 00007700:·7220·6d6f·6469·6669·6361·7469·6f6e·206f··r·modification·o | ||
| 00007710:· | 00007710:·6620·7468·6520·6669·6c65·2e0a·0a54·6f20··f·the·file...To· | ||
| 00007720:· | 00007720:·7072·6f70·6572·6c79·2073·6574·2074·6865··properly·set·the | ||
| 00007730:·2 | 00007730:·2067·726f·7570·206f·776e·6572·206f·6620···group·owner·of· | ||
| 00007740:·3c | 00007740:·3c63·6f64·653e·2f62·6f6f·742f·6566·692f··<code>/boot/efi/ | ||
| 00007750:· | 00007750:·4546·492f·7265·6468·6174·2f67·7275·622e··EFI/redhat/grub. | ||
| 00007760:· | 00007760:·6366·673c·2f63·6f64·653e·2c20·7275·6e20··cfg</code>,·run· | ||
| 00007770:· | 00007770:·7468·6520·636f·6d6d·616e·643a·0a3c·7072··the·command:.<pr | ||
| 00007780:·6 | 00007780:·653e·2420·7375·646f·2063·6867·7270·2072··e>$·sudo·chgrp·r | ||
| 00007790:· | 00007790:·6f6f·7420·2f62·6f6f·742f·6566·692f·4546··oot·/boot/efi/EF | ||
| 000077a0:· | 000077a0:·492f·7265·6468·6174·2f67·7275·622e·6366··I/redhat/grub.cf | ||
| 000077b0:·6 | 000077b0:·673c·2f70·7265·3e0a·2020·2020·2020·3c2f··g</pre>.······</ | ||
| 000077c0:· | 000077c0:·7464·3e0a·2020·2020·2020·3c74·6420·786d··td>.······<td·xm | ||
| 000077d0:· | 000077d0:·6c3a·6c61·6e67·3d22·656e·2d55·5322·3e0a··l:lang="en-US">. | ||
| 000077e0:· | 000077e0:·2020·2020·2020·2020·5468·6520·3c74·743e··········The·<tt> | ||
| 000077f0:· | 000077f0:·726f·6f74·3c2f·7474·3e20·6772·6f75·7020··root</tt>·group· | ||
| 00007800:·206 | 00007800:·6973·2061·2068·6967·686c·792d·7072·6976··is·a·highly-priv | ||
| 00007810:· | 00007810:·696c·6567·6564·2067·726f·7570·2e20·4675··ileged·group.·Fu | ||
| 00007820:· | 00007820:·7274·6865·726d·6f72·652c·2074·6865·2067··rthermore,·the·g | ||
| 00007830:· | 00007830:·726f·7570·2d6f·776e·6572·206f·6620·7468··roup-owner·of·th | ||
| 00007840:· | 00007840:·6973·0a66·696c·6520·7368·6f75·6c64·206e··is.file·should·n | ||
| 00007850:· | 00007850:·6f74·2068·6176·6520·616e·7920·6163·6365··ot·have·any·acce | ||
| 00007860:· | 00007860:·7373·2070·7269·7669·6c65·6765·7320·616e··ss·privileges·an | ||
| 00007870:· | 00007870:·7977·6179·2e0a·2020·2020·2020·3c2f·7464··yway..······</td | ||
| 00007880:· | 00007880:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 00007890:·74 | 00007890:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | ||
| 000078a0:· | 000078a0:·2e33·2e32·3c2f·7464·3e0a·2020·2020·2020··.3.2</td>.······ | ||
| 000078b0:· | 000078b0:·3c74·643e·5665·7269·6679·202f·626f·6f74··<td>Verify·/boot | ||
| 000078c0:·2 | 000078c0:·2f67·7275·6232·2f75·7365·722e·6366·6720··/grub2/user.cfg· | ||
| 000078d0:·4 | 000078d0:·4772·6f75·7020·4f77·6e65·7273·6869·703c··Group·Ownership< | ||
| 000078e0:· | 000078e0:·2f74·643e·0a20·2020·2020·203c·7464·2078··/td>.······<td·x | ||
| 000078f0:·6 | 000078f0:·6d6c·3a6c·616e·673d·2265·6e2d·5553·223e··ml:lang="en-US"> | ||
| 00007900:· | 00007900:·0a20·2020·2020·2020·2054·6865·2066·696c··.········The·fil | ||
| 00007910:· | 00007910:·6520·3c74·743e·2f62·6f6f·742f·6772·7562··e·<tt>/boot/grub | ||
| 00007920:· | 00007920:·322f·7573·6572·2e63·6667·3c2f·7474·3e20··2/user.cfg</tt>· | ||
| 00007930:· | 00007930:·7368·6f75·6c64·2062·6520·6772·6f75·702d··should·be·group- | ||
| 00007940:·6 | 00007940:·6f77·6e65·6420·6279·2074·6865·203c·7474··owned·by·the·<tt | ||
| 00007950:· | 00007950:·3e72·6f6f·743c·2f74·743e·0a67·726f·7570··>root</tt>.group | ||
| 00007960:·6f | 00007960:·2074·6f20·7072·6576·656e·7420·7265·6164···to·prevent·read | ||
| 00007970:·6 | 00007970:·696e·6720·6f72·206d·6f64·6966·6963·6174··ing·or·modificat | ||
| 00007980:· | 00007980:·696f·6e20·6f66·2074·6865·2066·696c·652e··ion·of·the·file. | ||
| 00007990:· | 00007990:·0a0a·546f·2070·726f·7065·726c·7920·7365··..To·properly·se | ||
| 000079a0:· | 000079a0:·7420·7468·6520·6772·6f75·7020·6f77·6e65··t·the·group·owne | ||
| 000079b0:· | 000079b0:·7220·6f66·203c·636f·6465·3e2f·626f·6f74··r·of·<code>/boot | ||
| 000079c0:·2 | 000079c0:·2f67·7275·6232·2f75·7365·722e·6366·673c··/grub2/user.cfg< | ||
| 000079d0:· | 000079d0:·2f63·6f64·653e·2c20·7275·6e20·7468·6520··/code>,·run·the· | ||
| 000079e0:· | 000079e0:·636f·6d6d·616e·643a·0a3c·7072·653e·2420··command:.<pre>$· | ||
| 000079f0:· | 000079f0:·7375·646f·2063·6867·7270·2072·6f6f·7420··sudo·chgrp·root· | ||
| 00007a00:· | 00007a00:·2f62·6f6f·742f·6772·7562·322f·7573·6572··/boot/grub2/user | ||
| 00007a10:·2 | 00007a10:·2e63·6667·3c2f·7072·653e·0a20·2020·2020··.cfg</pre>.····· | ||
| 00007a20:· | 00007a20:·203c·2f74·643e·0a20·2020·2020·203c·7464···</td>.······<td | ||
| 00007a30:· | 00007a30:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00007a40:· | 00007a40:·223e·0a20·2020·2020·2020·2054·6865·203c··">.········The·< | ||
| 00007a50:· | 00007a50:·7474·3e72·6f6f·743c·2f74·743e·2067·726f··tt>root</tt>·gro | ||
| 00007a60:·7 | 00007a60:·7570·2069·7320·6120·6869·6768·6c79·2d70··up·is·a·highly-p | ||
| 00007a70:· | 00007a70:·7269·7669·6c65·6765·6420·6772·6f75·702e··rivileged·group. | ||
| 00007a80:· | 00007a80:·2046·7572·7468·6572·6d6f·7265·2c20·7468···Furthermore,·th | ||
| 00007a90:· | 00007a90:·6520·6772·6f75·702d·6f77·6e65·7220·6f66··e·group-owner·of | ||
| 00007aa0:· | 00007aa0:·2074·6869·730a·6669·6c65·2073·686f·756c···this.file·shoul | ||
| 00007ab0:· | 00007ab0:·6420·6e6f·7420·6861·7665·2061·6e79·2061··d·not·have·any·a | ||
| 00007ac0:·6 | 00007ac0:·6363·6573·7320·7072·6976·696c·6567·6573··ccess·privileges | ||
| 00007ad0:·6179· | 00007ad0:·2061·6e79·7761·792e·204e·6f6e·2d72·6f6f···anyway.·Non-roo | ||
| 00007ae0:· | 00007ae0:·7420·7573·6572·7320·7768·6f20·7265·6164··t·users·who·read | ||
| 00007af0:· | 00007af0:·2074·6865·2062·6f6f·7420·7061·7261·6d65···the·boot·parame | ||
| 00007b00:· | 00007b00:·7465·7273·0a6d·6179·2062·6520·6162·6c65··ters.may·be·able | ||
| Max diff block lines reached; 1064663/1127203 bytes (94.45%) of diff not shown. | |||
| Offset 464, 48 lines modified | Offset 464, 30 lines modified | ||
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ·····························································································Only·root·should·be | 468 | ·····························································································Only·root·should·be |
| 469 | ·····························································································able·to·modify | 469 | ·····························································································able·to·modify |
| 470 | ·····························································································important·boot | 470 | ·····························································································important·boot |
| 471 | ······································The·file·/boot/ | 471 | ······································The·file·/boot/grub2/user.cfg·should·be·owned·by·the···parameters.·Also, |
| 472 | ··················Verify·/boot/ | 472 | ··················Verify·/boot/grub2/·root·user·to·prevent·reading·or·modification·of·the····non-root·users·who |
| 473 | 1.3.2············· | 473 | 1.3.2·············user.cfg·User·······file.·To·properly·set·the·owner·of·/boot/grub2/········read·the·boot |
| 474 | ·················· | 474 | ··················Ownership···········user.cfg,·run·the·command:·····························parameters·may·be |
| 475 | ······································$·sudo·chown·root·/boot/ | 475 | ······································$·sudo·chown·root·/boot/grub2/user.cfg·················able·to·identify |
| 476 | ·····························································································weaknesses·in | ||
| 477 | ·····························································································security·upon·boot | ||
| 478 | ·····························································································and·be·able·to | ||
| 479 | ·····························································································exploit·them. | ||
| 480 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 481 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 482 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | ||
| 483 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | ||
| 484 | ·····························································································parameters. | ||
| 485 | ·····························································································The·root·group·is·a | ||
| 486 | ·····························································································highly-privileged | ||
| 487 | ·····························································································group.·Furthermore, | ||
| 488 | ·····························································································the·group-owner·of | ||
| 489 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | ||
| 490 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | ||
| 491 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | ||
| 492 | 1.3.2·············EFI/redhat/user.cfg·owner·of·/boot/efi/EFI/redhat/user.cfg,·run·the········Non-root·users·who | ||
| 493 | ··················Group·Ownership·····command:···············································read·the·boot | ||
| 494 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | ||
| 495 | ·····························································································able·to·identify | ||
| 496 | ·····························································································weaknesses·in | 476 | ·····························································································weaknesses·in |
| 497 | ·····························································································security·upon·boot | 477 | ·····························································································security·upon·boot |
| 498 | ·····························································································and·be·able·to | 478 | ·····························································································and·be·able·to |
| 499 | ·····························································································exploit·them. | 479 | ·····························································································exploit·them. |
| 500 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 501 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 502 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 503 | ·················· | 480 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a |
| 481 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 482 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 483 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 484 | ··················Ownership···········command:···············································this·file·should·not | ||
| 485 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 504 | ····························································································· | 486 | ·····························································································privileges·anyway. |
| 505 | ·····························································································The·root·group·is·a | 487 | ·····························································································The·root·group·is·a |
| 506 | ·····························································································highly-privileged | 488 | ·····························································································highly-privileged |
| 507 | ·····························································································group.·Furthermore, | 489 | ·····························································································group.·Furthermore, |
| 508 | ·····························································································the·group-owner·of | 490 | ·····························································································the·group-owner·of |
| 509 | ·····························································································this·file·should·not | 491 | ·····························································································this·file·should·not |
| 510 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access | 492 | ······································The·file·/boot/grub2/user.cfg·should·be·group-owned·by·have·any·access |
| 511 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. | 493 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·reading·or·modification·of···privileges·anyway. |
| Offset 513, 60 lines modified | Offset 495, 78 lines modified | ||
| 513 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot | 495 | ··················Ownership···········grub2/user.cfg,·run·the·command:·······················read·the·boot |
| 514 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be | 496 | ······································$·sudo·chgrp·root·/boot/grub2/user.cfg·················parameters·may·be |
| 515 | ·····························································································able·to·identify | 497 | ·····························································································able·to·identify |
| 516 | ·····························································································weaknesses·in | 498 | ·····························································································weaknesses·in |
| 517 | ·····························································································security·upon·boot | 499 | ·····························································································security·upon·boot |
| 518 | ·····························································································and·be·able·to | 500 | ·····························································································and·be·able·to |
| 519 | ·····························································································exploit·them. | 501 | ·····························································································exploit·them. |
| 520 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 521 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 522 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 523 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 524 | ··················Ownership···········command:···············································this·file·should·not | ||
| 525 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 526 | ·····························································································privileges·anyway. | ||
| 527 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 528 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 529 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 530 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 531 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 532 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be | 502 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be |
| 533 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify | 503 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify |
| 534 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot | 504 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot |
| 535 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. | 505 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. |
| 536 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg | 506 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg |
| 507 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | ||
| 508 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 509 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | ||
| 510 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | ||
| 511 | ·····························································································boot·parameters. | ||
| 512 | ······································File·permissions·for·/boot/grub2/user.cfg·should·be····Proper·permissions | ||
| 513 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 514 | 1.3.2·············user.cfg············grub2/user.cfg,·run·the·command:·······················root·user·can·read | ||
| 515 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/user.cfg··················or·modify·important | ||
| 516 | ·····························································································boot·parameters. | ||
| 517 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 518 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 519 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 520 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 521 | ·····························································································parameters. | ||
| 522 | ··················Verify·the·UEFI·····File·permissions·for·/boot/efi/EFI/redhat/grub.cfg·····Proper·permissions | ||
| 523 | ··················Boot·Loader·········should·be·set·to·700.·To·properly·set·the·permissions··ensure·that·only·the | ||
| 524 | 1.3.2·············grub.cfg············of·/boot/efi/EFI/redhat/grub.cfg,·run·the·command:·····root·user·can·modify | ||
| 525 | ··················Permissions·········$·sudo·chmod·700·/boot/efi/EFI/redhat/grub.cfg·········important·boot | ||
| 526 | ·····························································································parameters. | ||
| 527 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | ||
| 528 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | ||
| 529 | 1.3.2·············grub.cfg·User·······modification·of·the·file.·To·properly·set·the·owner·of·important·boot | ||
| 530 | ··················Ownership···········/boot/efi/EFI/redhat/grub.cfg,·run·the·command:········parameters. | ||
| 531 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/grub.cfg | ||
| 537 | ·····························································································The·root·group·is·a | 532 | ·····························································································The·root·group·is·a |
| 538 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | 533 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged |
| 539 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | 534 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, |
| 540 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | 535 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of |
| 541 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not | 536 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not |
| 542 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access | 537 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access |
| 543 | ·····························································································privileges·anyway. | 538 | ·····························································································privileges·anyway. |
| 539 | ·····························································································The·root·group·is·a | ||
| 540 | ·····························································································highly-privileged | ||
| 541 | ·····························································································group.·Furthermore, | ||
| 542 | ·····························································································the·group-owner·of | ||
| 543 | ······································The·file·/boot/efi/EFI/redhat/user.cfg·should·be·······this·file·should·not | ||
| 544 | ······································group-owned·by·the·root·group·to·prevent·reading·or····have·any·access | ||
| 545 | ··················Verify·/boot/efi/···modification·of·the·file.·To·properly·set·the·group····privileges·anyway. | ||
| 546 | 1.3.2·············EFI/redhat/user.cfg·owner·of·/boot/efi/EFI/redhat/user.cfg,·run·the········Non-root·users·who | ||
| 547 | ··················Group·Ownership·····command:···············································read·the·boot | ||
| 548 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/user.cfg········parameters·may·be | ||
| 549 | ·····························································································able·to·identify | ||
| 550 | ·····························································································weaknesses·in | ||
| 551 | ·····························································································security·upon·boot | ||
| 552 | ·····························································································and·be·able·to | ||
| 553 | ·····························································································exploit·them. | ||
| 544 | ·····························································································Only·root·should·be | 554 | ·····························································································Only·root·should·be |
| 545 | ·····························································································able·to·modify | 555 | ·····························································································able·to·modify |
| Max diff block lines reached; 341561/356486 bytes (95.81%) of diff not shown. | |||
| Offset 40, 57 lines modified | Offset 40, 14 lines modified | ||
| 40 | ····<th>Mapping</th> | 40 | ····<th>Mapping</th> |
| 41 | ····<th>Rule·Title</th> | 41 | ····<th>Rule·Title</th> |
| 42 | ····<th>Description</th> | 42 | ····<th>Description</th> |
| 43 | ····<th>Rationale</th> | 43 | ····<th>Rationale</th> |
| 44 | ··</thead> | 44 | ··</thead> |
| 45 | ··<tbody> | 45 | ··<tbody> |
| 46 | ··<tr> | 46 | ··<tr> |
| 47 | ······<td>3.1.1<br/>3.1.6</td> | ||
| 48 | ······<td>Direct·root·Logins·Not·Allowed</td> | ||
| 49 | ······<td·xml:lang="en-US"> | ||
| 50 | ········To·further·limit·access·to·the·<tt>root</tt>·account,·administrators | ||
| 51 | can·disable·root·logins·at·the·console·by·editing·the·<tt>/etc/securetty</tt>·file. | ||
| 52 | This·file·lists·all·devices·the·root·user·is·allowed·to·login·to.·If·the·file·does | ||
| 53 | not·exist·at·all,·the·root·user·can·login·through·any·communication·device·on·the | ||
| 54 | system,·whether·via·the·console·or·via·a·raw·network·interface.·This·is·dangerous | ||
| 55 | as·user·can·login·to·the·system·as·root·via·Telnet,·which·sends·the·password·in | ||
| 56 | plain·text·over·the·network.·By·default,·Red·Hat·Enterprise·Linux·8's | ||
| 57 | <tt>/etc/securetty</tt>·file·only·allows·the·root·user·to·login·at·the·console | ||
| 58 | physically·attached·to·the·system.·To·prevent·root·from·logging·in,·remove·the | ||
| 59 | contents·of·this·file.·To·prevent·direct·root·logins,·remove·the·contents·of·this | ||
| 60 | file·by·typing·the·following·command: | ||
| 61 | <pre> | ||
| 62 | $·sudo·echo·>·/etc/securetty | ||
| 63 | </pre> | ||
| 64 | ······</td> | ||
| 65 | ······<td·xml:lang="en-US"> | ||
| 66 | ········Disabling·direct·root·logins·ensures·proper·accountability·and·multifactor | ||
| 67 | authentication·to·privileged·accounts.·Users·will·first·login,·then·escalate | ||
| 68 | to·privileged·(root)·access·via·su·/·sudo.·This·is·required·for·FISMA·Low | ||
| 69 | and·FISMA·Moderate·systems. | ||
| 70 | ······</td> | ||
| 71 | ····</tr> | ||
| 72 | ····<tr> | ||
| 73 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 74 | ······<td>Restrict·Virtual·Console·Root·Logins</td> | ||
| 75 | ······<td·xml:lang="en-US"> | ||
| 76 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 77 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 78 | <pre>vc/1 | ||
| 79 | vc/2 | ||
| 80 | vc/3 | ||
| 81 | vc/4</pre> | ||
| 82 | ······</td> | ||
| 83 | ······<td·xml:lang="en-US"> | ||
| 84 | ········Preventing·direct·root·login·to·virtual·console·devices | ||
| 85 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 86 | using·the·root·account. | ||
| 87 | ······</td> | ||
| 88 | ····</tr> | ||
| 89 | ····<tr> | ||
| 90 | ······<td>3.1.1<br/>3.1.5</td> | 47 | ······<td>3.1.1<br/>3.1.5</td> |
| 91 | ······<td>Disable·SSH·Root·Login</td> | 48 | ······<td>Disable·SSH·Root·Login</td> |
| 92 | ······<td·xml:lang="en-US"> | 49 | ······<td·xml:lang="en-US"> |
| 93 | ········The·root·user·should·never·be·allowed·to·login·to·a | 50 | ········The·root·user·should·never·be·allowed·to·login·to·a |
| 94 | system·directly·over·a·network. | 51 | system·directly·over·a·network. |
| 95 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in | 52 | To·disable·root·login·via·SSH,·add·or·correct·the·following·line·in |
| Offset 105, 51 lines modified | Offset 62, 31 lines modified | ||
| 105 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 106 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 107 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 108 | ······</td> | 65 | ······</td> |
| 109 | ····</tr> | 66 | ····</tr> |
| 110 | ····<tr> | 67 | ····<tr> |
| 111 | ······<td>3.1.1</td> | 68 | ······<td>3.1.1</td> |
| 112 | ······<td>Disable·GDM· | 69 | ······<td>Disable·GDM·Guest·Login</td> |
| 113 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 114 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to· | 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·login·without·credentials |
| 115 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 116 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 117 | 72 | which·can·be·useful·for·public·kiosk·scenarios.·Allowing·users·to·login·without·credentials | |
| 73 | or·"guest"·account·access·has·inherent·security·risks·and·should·be·disabled.·To·do·disable | ||
| 74 | timed·logins·or·guest·account·access,·set·the·<tt>TimedLoginEnable</tt>·to·<tt>false</tt>·in | ||
| 118 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | 75 | the·<tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: |
| 119 | <pre>[daemon] | 76 | <pre>[daemon] |
| 120 | 77 | TimedLoginEnable=false</pre> | |
| 121 | ······</td> | 78 | ······</td> |
| 122 | ······<td·xml:lang="en-US"> | 79 | ······<td·xml:lang="en-US"> |
| 123 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 124 | system·security. | 81 | system·security. |
| 125 | ······</td> | 82 | ······</td> |
| 126 | ····</tr> | 83 | ····</tr> |
| 127 | ····<tr> | 84 | ····<tr> |
| 128 | ······<td>3.1.1<br/>3.1.5</td> | 85 | ······<td>3.1.1<br/>3.1.5</td> |
| 129 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 130 | ······<td·xml:lang="en-US"> | ||
| 131 | ········If·an·account·is·configured·for·password·authentication | ||
| 132 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 133 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 134 | <tt>nullok</tt>·in | ||
| 135 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 136 | <tt>/etc/pam.d/password-auth</tt> | ||
| 137 | to·prevent·logins·with·empty·passwords. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 141 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 142 | empty·passwords·should·never·be·used·in·operational·environments. | ||
| 143 | ······</td> | ||
| 144 | ····</tr> | ||
| 145 | ····<tr> | ||
| 146 | ······<td>3.1.1<br/>3.1.5</td> | ||
| 147 | ······<td>Verify·Only·Root·Has·UID·0</td> | 86 | ······<td>Verify·Only·Root·Has·UID·0</td> |
| 148 | ······<td·xml:lang="en-US"> | 87 | ······<td·xml:lang="en-US"> |
| 149 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should | 88 | ········If·any·account·other·than·root·has·a·UID·of·0,·this·misconfiguration·should |
| 150 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have | 89 | be·investigated·and·the·accounts·other·than·root·should·be·removed·or·have |
| 151 | their·UID·changed. | 90 | their·UID·changed. |
| 152 | <br·/> | 91 | <br·/> |
| 153 | If·the·account·is·associated·with·system·commands·or·applications·the·UID | 92 | If·the·account·is·associated·with·system·commands·or·applications·the·UID |
| Offset 188, 14 lines modified | Offset 125, 77 lines modified | ||
| 188 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | 125 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance |
| 189 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | 126 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of |
| 190 | misconfiguration·elsewhere. | 127 | misconfiguration·elsewhere. |
| 191 | ······</td> | 128 | ······</td> |
| 192 | ····</tr> | 129 | ····</tr> |
| 193 | ····<tr> | 130 | ····<tr> |
| 194 | ······<td>3.1.1<br/>3.1.5</td> | 131 | ······<td>3.1.1<br/>3.1.5</td> |
| 132 | ······<td>Prevent·Login·to·Accounts·With·Empty·Password</td> | ||
| 133 | ······<td·xml:lang="en-US"> | ||
| 134 | ········If·an·account·is·configured·for·password·authentication | ||
| 135 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 136 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 137 | <tt>nullok</tt>·in | ||
| 138 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| Max diff block lines reached; 457836/465868 bytes (98.28%) of diff not shown. | |||
| Offset 1, 38 lines modified | Offset 1, 13 lines modified | ||
| 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red | 1 | Rules·with·NIST-800-171·Reference·in·Guide·to·the·Secure·Configuration·of·Red |
| 2 | Hat·Enterprise·Linux·8 | 2 | Hat·Enterprise·Linux·8 |
| 3 | ·······································To·further·limit·access·to·the·root·account, | ||
| 4 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 5 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 6 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 7 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 8 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| 9 | ·······································whether·via·the·console·or·via·a·raw·network···········authentication·to | ||
| 10 | 3.1.1··································interface.·This·is·dangerous·as·user·can·login·to·the··privileged·accounts. | ||
| 11 | 3.1.6···Direct·root·Logins·Not·Allowed·system·as·root·via·Telnet,·which·sends·the·password·in·Users·will·first | ||
| 12 | ·······································plain·text·over·the·network.·By·default,·Red·Hat·······login,·then·escalate | ||
| 13 | ·······································Enterprise·Linux·8's·/etc/securetty·file·only·allows···to·privileged·(root) | ||
| 14 | ·······································the·root·user·to·login·at·the·console·physically·······access·via·su·/ | ||
| 15 | ·······································attached·to·the·system.·To·prevent·root·from·logging···sudo.·This·is | ||
| 16 | ·······································in,·remove·the·contents·of·this·file.·To·prevent·······required·for·FISMA | ||
| 17 | ·······································direct·root·logins,·remove·the·contents·of·this·file···Low·and·FISMA | ||
| 18 | ·······································by·typing·the·following·command:·······················Moderate·systems. | ||
| 19 | ·······································$·sudo·echo·>·/etc/securetty | ||
| 20 | ·······································To·restrict·root·logins·through·the·(deprecated)·······Preventing·direct | ||
| 21 | ·······································virtual·console·devices,·ensure·lines·of·this·form·do··root·login·to | ||
| 22 | ·······································not·appear·in·/etc/securetty:··························virtual·console | ||
| 23 | 3.1.1···Restrict·Virtual·Console·Root··vc/1···················································devices·helps·ensure | ||
| 24 | 3.1.5···Logins·························vc/2···················································accountability·for | ||
| 25 | ·······································vc/3···················································actions·taken·on·the | ||
| 26 | ·······································vc/4···················································system·using·the | ||
| 27 | ······························································································root·account. | ||
| 28 | ······························································································Even·though·the | 3 | ······························································································Even·though·the |
| 29 | ······························································································communications | 4 | ······························································································communications |
| 30 | ······························································································channel·may·be | 5 | ······························································································channel·may·be |
| 31 | ······························································································encrypted,·an | 6 | ······························································································encrypted,·an |
| 32 | ······························································································additional·layer·of | 7 | ······························································································additional·layer·of |
| 33 | ······························································································security·is·gained | 8 | ······························································································security·is·gained |
| 34 | ······························································································by·extending·the | 9 | ······························································································by·extending·the |
| Offset 47, 34 lines modified | Offset 22, 23 lines modified | ||
| 47 | ······························································································actions·performed·on | 22 | ······························································································actions·performed·on |
| 48 | ······························································································the·system·and·also | 23 | ······························································································the·system·and·also |
| 49 | ······························································································helps·to·minimize | 24 | ······························································································helps·to·minimize |
| 50 | ······························································································direct·attack | 25 | ······························································································direct·attack |
| 51 | ······························································································attempts·on·root's | 26 | ······························································································attempts·on·root's |
| 52 | ······························································································password. | 27 | ······························································································password. |
| 53 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | 28 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to |
| 54 | ·······································automatically·login·without·user·interaction·or | ||
| 55 | ·······································credentials.·User·should·always·be·required·to·········Failure·to·restrict | ||
| 56 | ·······································authenticate·themselves·to·the·system·that·they·are····system·access·to | ||
| 57 | 29 | ·······································login·without·credentials·which·can·be·useful·for | |
| 30 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 31 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 32 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 58 | ······································· | 33 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts |
| 59 | ······································· | 34 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system |
| 60 | ······································· | 35 | ·······································etc/gdm/custom.conf.·For·example:······················security. |
| 61 | ·······································[daemon] | 36 | ·······································[daemon] |
| 62 | ······································· | 37 | ·······································TimedLoginEnable=false |
| 63 | ······························································································If·an·account·has·an | ||
| 64 | ······························································································empty·password, | ||
| 65 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 66 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 67 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 68 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 69 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 70 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 71 | ······························································································never·be·used·in | ||
| 72 | ······························································································operational | ||
| 73 | ······························································································environments. | ||
| 74 | ······························································································An·account·has·root | 38 | ······························································································An·account·has·root |
| 75 | ······························································································authority·if·it·has | 39 | ······························································································authority·if·it·has |
| 76 | ······························································································a·UID·of·0.·Multiple | 40 | ······························································································a·UID·of·0.·Multiple |
| 77 | ······························································································accounts·with·a·UID | 41 | ······························································································accounts·with·a·UID |
| 78 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more | 42 | ·······································If·any·account·other·than·root·has·a·UID·of·0,·this····of·0·afford·more |
| 79 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for | 43 | ·······································misconfiguration·should·be·investigated·and·the········opportunity·for |
| 80 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders | 44 | ·······································accounts·other·than·root·should·be·removed·or·have·····potential·intruders |
| Offset 97, 105 lines modified | Offset 61, 130 lines modified | ||
| 97 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login | 61 | 3.1.1···Disable·SSH·Access·via·Empty···empty·passwords,·add·or·correct·the·following·line·in··that·remote·login |
| 98 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require | 62 | 3.1.5···Passwords······················/etc/ssh/sshd_config:··································via·SSH·will·require |
| 99 | ·······································PermitEmptyPasswords·no································a·password,·even·in | 63 | ·······································PermitEmptyPasswords·no································a·password,·even·in |
| 100 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of | 64 | ·······································Any·accounts·with·empty·passwords·should·be·disabled···the·event·of |
| 101 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration | 65 | ·······································immediately,·and·PAM·configuration·should·prevent······misconfiguration |
| 102 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. | 66 | ·······································users·from·being·able·to·assign·themselves·empty·······elsewhere. |
| 103 | ·······································passwords. | 67 | ·······································passwords. |
| 68 | ······························································································If·an·account·has·an | ||
| 69 | ······························································································empty·password, | ||
| 70 | ·······································If·an·account·is·configured·for·password···············anyone·could·log·in | ||
| 71 | ·······································authentication·but·does·not·have·an·assigned·password,·and·run·commands | ||
| 72 | 3.1.1···Prevent·Login·to·Accounts·With·it·may·be·possible·to·log·into·the·account·without·····with·the·privileges | ||
| 73 | 3.1.5···Empty·Password·················authentication.·Remove·any·instances·of·the·nullok·in··of·that·account. | ||
| 74 | ·······································/etc/pam.d/system-auth·and·/etc/pam.d/password-auth·to·Accounts·with·empty | ||
| 75 | ·······································prevent·logins·with·empty·passwords.···················passwords·should | ||
| 104 | ······························································································ | 76 | ······························································································never·be·used·in |
| 105 | ······························································································ | 77 | ······························································································operational |
| 106 | ·······································To·restrict·root·logins·on·serial·ports,·ensure·lines··port·interfaces | ||
| 107 | 3.1.1···Restrict·Serial·Port·Root······of·this·form·do·not·appear·in·/etc/securetty:··········helps·ensure | ||
| 108 | 3.1.5···Logins·························ttyS0··················································accountability·for | ||
| 109 | ·······································ttyS1··················································actions·taken·on·the | ||
| 110 | ······························································································systems·using·the | ||
| 111 | ······························································································ | 78 | ······························································································environments. |
| 112 | ·······································The·GNOME·Display·Manager·(GDM)·can·allow·users·to | ||
| 113 | ·······································login·without·credentials·which·can·be·useful·for | ||
| 114 | ·······································public·kiosk·scenarios.·Allowing·users·to·login········Failure·to·restrict | ||
| 115 | ·······································without·credentials·or·"guest"·account·access·has······system·access·to | ||
| 116 | 3.1.1···Disable·GDM·Guest·Login········inherent·security·risks·and·should·be·disabled.·To·do··authenticated·users | ||
| 117 | ·······································disable·timed·logins·or·guest·account·access,·set·the··negatively·impacts | ||
| 118 | ·······································TimedLoginEnable·to·false·in·the·[daemon]·section·in·/·operating·system | ||
| 119 | ·······································etc/gdm/custom.conf.·For·example:······················security. | ||
| 120 | ·······································[daemon] | ||
| 121 | ·······································TimedLoginEnable=false | ||
| 122 | ······························································································This·prevents | 79 | ······························································································This·prevents |
| 123 | ······························································································attackers·with | 80 | ······························································································attackers·with |
| 124 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from | 81 | ·······································Emergency·mode·is·intended·as·a·system·recovery········physical·access·from |
| 125 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing | 82 | ·······································method,·providing·a·single·user·root·access·to·the·····trivially·bypassing |
| 126 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the | 83 | 3.1.1···Require·Authentication·for·····system·during·a·failed·boot·sequence.··················security·on·the |
| 127 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining | 84 | 3.4.5···Emergency·Systemd·Target······························································machine·and·gaining |
| 128 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such | 85 | ·······································By·default,·Emergency·mode·is·protected·by·requiring·a·root·access.·Such |
| 129 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further | 86 | ·······································password·and·is·set·in·/usr/lib/systemd/system/········accesses·are·further |
| 130 | ·······································emergency.service.·····································prevented·by | 87 | ·······································emergency.service.·····································prevented·by |
| 131 | ······························································································configuring·the | 88 | ······························································································configuring·the |
| 132 | ······························································································bootloader·password. | 89 | ······························································································bootloader·password. |
| 90 | ·······································To·further·limit·access·to·the·root·account, | ||
| 91 | ·······································administrators·can·disable·root·logins·at·the·console··Disabling·direct | ||
| 92 | ·······································by·editing·the·/etc/securetty·file.·This·file·lists····root·logins·ensures | ||
| 93 | ·······································all·devices·the·root·user·is·allowed·to·login·to.·If···proper | ||
| 94 | ·······································the·file·does·not·exist·at·all,·the·root·user·can······accountability·and | ||
| 95 | ·······································login·through·any·communication·device·on·the·system,··multifactor | ||
| Max diff block lines reached; 801144/819103 bytes (97.81%) of diff not shown. | |||
| Offset 4075, 15 lines modified | Offset 4075, 15 lines modified | ||
| 4075 | <tt>RekeyLimit</tt>. | 4075 | <tt>RekeyLimit</tt>. |
| 4076 | ··</td> | 4076 | ··</td> |
| 4077 | ··<td·xml:lang="en-US"> | 4077 | ··<td·xml:lang="en-US"> |
| 4078 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4078 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4079 | time-based·limit,·effects·of·potential·attacks·against | 4079 | time-based·limit,·effects·of·potential·attacks·against |
| 4080 | encryption·keys·are·limited. | 4080 | encryption·keys·are·limited. |
| 4081 | ··</td> | 4081 | ··</td> |
| 4082 | ··<td>var_ssh_client_rekey_limit_ | 4082 | ··<td>var_ssh_client_rekey_limit_time=1hour<br/>var_ssh_client_rekey_limit_size=1G</td> |
| 4083 | </tr> | 4083 | </tr> |
| 4084 | <tr> | 4084 | <tr> |
| 4085 | ··<td></td> | 4085 | ··<td></td> |
| 4086 | ··<td>CCE-83349-1</td> | 4086 | ··<td>CCE-83349-1</td> |
| 4087 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> | 4087 | ··<td>SSH·client·uses·strong·entropy·to·seed·(for·CSH·like·shells)</td> |
| 4088 | ··<td·xml:lang="en-US"> | 4088 | ··<td·xml:lang="en-US"> |
| 4089 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure | 4089 | To·set·up·SSH·client·to·use·entropy·from·a·high-quality·source,·make·sure |
| Offset 4138, 15 lines modified | Offset 4138, 15 lines modified | ||
| 4138 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> | 4138 | <pre>RekeyLimit·<tt>1G</tt>·<tt>1hour</tt></pre> |
| 4139 | ··</td> | 4139 | ··</td> |
| 4140 | ··<td·xml:lang="en-US"> | 4140 | ··<td·xml:lang="en-US"> |
| 4141 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling | 4141 | By·decreasing·the·limit·based·on·the·amount·of·data·and·enabling |
| 4142 | time-based·limit,·effects·of·potential·attacks·against | 4142 | time-based·limit,·effects·of·potential·attacks·against |
| 4143 | encryption·keys·are·limited. | 4143 | encryption·keys·are·limited. |
| 4144 | ··</td> | 4144 | ··</td> |
| 4145 | ··<td>var_rekey_limit_ | 4145 | ··<td>var_rekey_limit_size=1G<br/>var_rekey_limit_time=1hour</td> |
| 4146 | </tr> | 4146 | </tr> |
| 4147 | <tr> | 4147 | <tr> |
| 4148 | ··<td></td> | 4148 | ··<td></td> |
| 4149 | ··<td>CCE-82462-3</td> | 4149 | ··<td>CCE-82462-3</td> |
| 4150 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> | 4150 | ··<td>SSH·server·uses·strong·entropy·to·seed</td> |
| 4151 | ··<td·xml:lang="en-US"> | 4151 | ··<td·xml:lang="en-US"> |
| 4152 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. | 4152 | To·set·up·SSH·server·to·use·entropy·from·a·high-quality·source,·edit·the·<tt>/etc/sysconfig/sshd</tt>·file. |
| Offset 3356, 16 lines modified | Offset 3356, 16 lines modified | ||
| 3356 | ······················································································································options,·which·can | 3356 | ······················································································································options,·which·can |
| 3357 | ······················································································································help·protect | 3357 | ······················································································································help·protect |
| 3358 | ······················································································································programs·which·use | 3358 | ······················································································································programs·which·use |
| 3359 | ······················································································································it. | 3359 | ······················································································································it. |
| 3360 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the | 3360 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·is·renegotiated,·both·in····By·decreasing·the |
| 3361 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the | 3361 | ·····························terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.·To·decrease·the····limit·based·on·the |
| 3362 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and | 3362 | ·····CCE-···Configure········default·limits,·put·line·RekeyLimit·1G·1hour·to·file·/etc/ssh/ssh_config.d/02-rekey-·····amount·of·data·and |
| 3363 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_ | 3363 | ·····82880-·session··········limit.conf.·Make·sure·that·there·is·no·other·RekeyLimit·configuration·preceding·the······enabling·time-based·var_ssh_client_rekey_limit_time=1hour |
| 3364 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_ | 3364 | ·····6······renegotiation····include·directive·in·the·main·config·file·/etc/ssh/ssh_config.·Check·also·other·files·in·limit,·effects·of···var_ssh_client_rekey_limit_size=1G |
| 3365 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks | 3365 | ············for·SSH·client···/etc/ssh/ssh_config.d·directory.·Files·are·processed·according·to·lexicographical·order··potential·attacks |
| 3366 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption | 3366 | ·····························of·file·names.·Make·sure·that·there·is·no·file·processed·before·02-rekey-limit.conf······against·encryption |
| 3367 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. | 3367 | ·····························containing·definition·of·RekeyLimit.·····················································keys·are·limited. |
| 3368 | ······················································································································Some·SSH | 3368 | ······················································································································Some·SSH |
| 3369 | ······················································································································implementations·use | 3369 | ······················································································································implementations·use |
| 3370 | ······················································································································the·openssl·library | 3370 | ······················································································································the·openssl·library |
| 3371 | ······················································································································for·entropy,·which | 3371 | ······················································································································for·entropy,·which |
| Offset 3416, 16 lines modified | Offset 3416, 16 lines modified | ||
| 3416 | ······················································································································generator·used·by | 3416 | ······················································································································generator·used·by |
| 3417 | ······················································································································SSH·would·be·known | 3417 | ······················································································································SSH·would·be·known |
| 3418 | ······················································································································to·potential | 3418 | ······················································································································to·potential |
| 3419 | ······················································································································attackers. | 3419 | ······················································································································attackers. |
| 3420 | ······················································································································By·decreasing·the | 3420 | ······················································································································By·decreasing·the |
| 3421 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the | 3421 | ·····························The·RekeyLimit·parameter·specifies·how·often·the·session·key·of·the·is·renegotiated,·····limit·based·on·the |
| 3422 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and | 3422 | ·····CCE-···Force·frequent···both·in·terms·of·amount·of·data·that·may·be·transmitted·and·the·time·elapsed.············amount·of·data·and |
| 3423 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_ | 3423 | ·····82177-·session·key······To·decrease·the·default·limits,·add·or·correct·the·following·line·in·/etc/ssh/···········enabling·time-based·var_rekey_limit_size=1G |
| 3424 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_ | 3424 | ·····7······renegotiation····sshd_config:·············································································limit,·effects·of···var_rekey_limit_time=1hour |
| 3425 | ·····························RekeyLimit·1G·1hour······································································potential·attacks | 3425 | ·····························RekeyLimit·1G·1hour······································································potential·attacks |
| 3426 | ······················································································································against·encryption | 3426 | ······················································································································against·encryption |
| 3427 | ······················································································································keys·are·limited. | 3427 | ······················································································································keys·are·limited. |
| 3428 | ······················································································································SSH·implementation | 3428 | ······················································································································SSH·implementation |
| 3429 | ······················································································································in·Red·Hat | 3429 | ······················································································································in·Red·Hat |
| 3430 | ······················································································································Enterprise·Linux·8 | 3430 | ······················································································································Enterprise·Linux·8 |
| 3431 | ······················································································································uses·the·openssl | 3431 | ······················································································································uses·the·openssl |
| Offset 24277, 17 lines modified | Offset 24277, 17 lines modified | ||
| 0005ed40:·696e·670a·7469·6d65·2d62·6173·6564·206c··ing.time-based·l | 0005ed40:·696e·670a·7469·6d65·2d62·6173·6564·206c··ing.time-based·l | ||
| 0005ed50:·696d·6974·2c20·6566·6665·6374·7320·6f66··imit,·effects·of | 0005ed50:·696d·6974·2c20·6566·6665·6374·7320·6f66··imit,·effects·of | ||
| 0005ed60:·2070·6f74·656e·7469·616c·2061·7474·6163···potential·attac | 0005ed60:·2070·6f74·656e·7469·616c·2061·7474·6163···potential·attac | ||
| 0005ed70:·6b73·2061·6761·696e·7374·0a65·6e63·7279··ks·against.encry | 0005ed70:·6b73·2061·6761·696e·7374·0a65·6e63·7279··ks·against.encry | ||
| 0005ed80:·7074·696f·6e20·6b65·7973·2061·7265·206c··ption·keys·are·l | 0005ed80:·7074·696f·6e20·6b65·7973·2061·7265·206c··ption·keys·are·l | ||
| 0005ed90:·696d·6974·6564·2e0a·2020·3c2f·7464·3e0a··imited..··</td>. | 0005ed90:·696d·6974·6564·2e0a·2020·3c2f·7464·3e0a··imited..··</td>. | ||
| 0005eda0:·2020·3c74·643e·7661·725f·7265·6b65·795f····<td>var_rekey_ | 0005eda0:·2020·3c74·643e·7661·725f·7265·6b65·795f····<td>var_rekey_ | ||
| 0005edb0:·6c69·6d69·745f·7 | 0005edb0:·6c69·6d69·745f·7369·7a65·3d31·473c·6272··limit_size=1G<br | ||
| 0005edc0:·3c62·722f·3e76·6172·5f72·656b·6579·5f6c··<br/>var_rekey_l | |||
| 0005ed | 0005edc0:·2f3e·7661·725f·7265·6b65·795f·6c69·6d69··/>var_rekey_limi | ||
| 0005edd0:·745f·7469·6d65·3d31·686f·7572·3c2f·7464··t_time=1hour</td | |||
| 0005ede0:·3e0a·3c2f·7472·3e0a·3c74·723e·0a20·203c··>.</tr>.<tr>.··< | 0005ede0:·3e0a·3c2f·7472·3e0a·3c74·723e·0a20·203c··>.</tr>.<tr>.··< | ||
| 0005edf0:·7464·3e3c·2f74·643e·0a20·203c·7464·3e43··td></td>.··<td>C | 0005edf0:·7464·3e3c·2f74·643e·0a20·203c·7464·3e43··td></td>.··<td>C | ||
| 0005ee00:·4345·2d38·3234·3632·2d33·3c2f·7464·3e0a··CE-82462-3</td>. | 0005ee00:·4345·2d38·3234·3632·2d33·3c2f·7464·3e0a··CE-82462-3</td>. | ||
| 0005ee10:·2020·3c74·643e·5353·4820·7365·7276·6572····<td>SSH·server | 0005ee10:·2020·3c74·643e·5353·4820·7365·7276·6572····<td>SSH·server | ||
| 0005ee20:·2075·7365·7320·7374·726f·6e67·2065·6e74···uses·strong·ent | 0005ee20:·2075·7365·7320·7374·726f·6e67·2065·6e74···uses·strong·ent | ||
| 0005ee30:·726f·7079·2074·6f20·7365·6564·3c2f·7464··ropy·to·seed</td | 0005ee30:·726f·7079·2074·6f20·7365·6564·3c2f·7464··ropy·to·seed</td | ||
| 0005ee40:·3e0a·2020·3c74·6420·786d·6c3a·6c61·6e67··>.··<td·xml:lang | 0005ee40:·3e0a·2020·3c74·6420·786d·6c3a·6c61·6e67··>.··<td·xml:lang |
| Offset 7644, 16 lines modified | Offset 7644, 16 lines modified | ||
| 7644 | ·····································corresponding·private·key.····························system·where·the | 7644 | ·····································corresponding·private·key.····························system·where·the |
| 7645 | ···························································································associated·public | 7645 | ···························································································associated·public |
| 7646 | ···························································································key·has·been | 7646 | ···························································································key·has·been |
| 7647 | ···························································································installed. | 7647 | ···························································································installed. |
| 7648 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7648 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7649 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7649 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7650 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7650 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7651 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7651 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_size=1G |
| 7652 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7652 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_time=1hour |
| 7653 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7653 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7654 | ·····································RekeyLimit·1G·1hour···································against·encryption | 7654 | ·····································RekeyLimit·1G·1hour···································against·encryption |
| 7655 | ···························································································keys·are·limited. | 7655 | ···························································································keys·are·limited. |
| 7656 | ···························································································SSH·implementation | 7656 | ···························································································SSH·implementation |
| 7657 | ···························································································in·Red·Hat | 7657 | ···························································································in·Red·Hat |
| 7658 | ···························································································Enterprise·Linux·8 | 7658 | ···························································································Enterprise·Linux·8 |
| 7659 | ···························································································uses·the·openssl | 7659 | ···························································································uses·the·openssl |
| Offset 64, 14949 lines modified | Offset 64, 14949 lines modified | ||
| 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | 000003f0:·6e67·3c2f·7468·3e0a·2020·2020·3c74·683e··ng</th>.····<th> | ||
| 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | 00000400:·5275·6c65·2054·6974·6c65·3c2f·7468·3e0a··Rule·Title</th>. | ||
| 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | 00000410:·2020·2020·3c74·683e·4465·7363·7269·7074······<th>Descript | ||
| 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | 00000420:·696f·6e3c·2f74·683e·0a20·2020·203c·7468··ion</th>.····<th | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | Diff chunk too large, falling back to line-by-line diff (14935 lines added, 14935 lines removed) | |
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·286 | 00000460:·2020·3c74·643e·4155·2d32·2861·293c·2f74····<td>AU-2(a)</t | ||
| 00000470:· | 00000470:·643e·0a20·2020·2020·203c·7464·3e43·6f6e··d>.······<td>Con | ||
| 00000480:· | 00000480:·6669·6775·7265·2061·7564·6974·696e·6720··figure·auditing· | ||
| 00000490:·6 | 00000490:·6f66·2075·6e73·7563·6365·7373·6675·6c20··of·unsuccessful· | ||
| 000004a0:·6 | 000004a0:·6f77·6e65·7273·6869·7020·6368·616e·6765··ownership·change | ||
| 000004b0:· | 000004b0:·733c·2f74·643e·0a20·2020·2020·203c·7464··s</td>.······<td | ||
| 000004c0:·7 | 000004c0:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 000004d0:· | 000004d0:·223e·0a20·2020·2020·2020·2045·6e73·7572··">.········Ensur | ||
| 000004e0:·6 | 000004e0:·6520·7468·6174·2075·6e73·7563·6365·7373··e·that·unsuccess | ||
| 000004f0:· | 000004f0:·6675·6c20·6174·7465·6d70·7473·2074·6f20··ful·attempts·to· | ||
| 00000500:· | 00000500:·6368·616e·6765·2061·6e20·6f77·6e65·7273··change·an·owners | ||
| 00000510:· | 00000510:·6869·7020·6f66·2066·696c·6573·206f·7220··hip·of·files·or· | ||
| 00000520:· | 00000520:·6469·7265·6374·6f72·6965·7320·6172·6520··directories·are· | ||
| 00000530:·6175·6469·74 | 00000530:·6175·6469·7465·642e·0a0a·5468·6520·666f··audited...The·fo | ||
| 00000540:· | 00000540:·6c6c·6f77·696e·6720·7275·6c65·7320·636f··llowing·rules·co | ||
| 00000550:·6 | 00000550:·6e66·6967·7572·6520·6175·6469·7420·6173··nfigure·audit·as | ||
| 00000560:· | 00000560:·2064·6573·6372·6962·6564·2061·626f·7665···described·above | ||
| 00000570:· | 00000570:·3a0a·3c70·7265·3e23·2320·556e·7375·6363··:.<pre>##·Unsucc | ||
| 00000580:·6 | 00000580:·6573·7366·756c·206f·776e·6572·7368·6970··essful·ownership | ||
| 00000590:· | 00000590:·2063·6861·6e67·650a·2d61·2061·6c77·6179···change.-a·alway | ||
| 000005a0:· | 000005a0:·732c·6578·6974·202d·4620·6172·6368·3d62··s,exit·-F·arch=b | ||
| 000005b0:· | 000005b0:·3332·202d·5320·6c63·686f·776e·2c66·6368··32·-S·lchown,fch | ||
| 000005c0:· | 000005c0:·6f77·6e2c·6368·6f77·6e2c·6663·686f·776e··own,chown,fchown | ||
| 000005d0:· | 000005d0:·6174·202d·4620·6578·6974·3d2d·4541·4343··at·-F·exit=-EACC | ||
| 000005e0:· | 000005e0:·4553·202d·4620·6175·6964·2667·743b·3d31··ES·-F·auid>=1 | ||
| 000005f0:· | 000005f0:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 00000600:·6 | 00000600:·6574·202d·4620·6b65·793d·756e·7375·6363··et·-F·key=unsucc | ||
| 00000610:·6 | 00000610:·6573·7366·756c·2d6f·776e·6572·2d63·6861··essful-owner-cha | ||
| 00000620:·6 | 00000620:·6e67·650a·2d61·2061·6c77·6179·732c·6578··nge.-a·always,ex | ||
| 00000630:· | 00000630:·6974·202d·4620·6172·6368·3d62·3634·202d··it·-F·arch=b64·- | ||
| 00000640:· | 00000640:·5320·6c63·686f·776e·2c66·6368·6f77·6e2c··S·lchown,fchown, | ||
| 00000650:· | 00000650:·6368·6f77·6e2c·6663·686f·776e·6174·202d··chown,fchownat·- | ||
| 00000660:· | 00000660:·4620·6578·6974·3d2d·4541·4343·4553·202d··F·exit=-EACCES·- | ||
| 00000670:· | 00000670:·4620·6175·6964·2667·743b·3d31·3030·3020··F·auid>=1000· | ||
| 00000680:· | 00000680:·2d46·2061·7569·6421·3d75·6e73·6574·202d··-F·auid!=unset·- | ||
| 00000690:· | 00000690:·4620·6b65·793d·756e·7375·6363·6573·7366··F·key=unsuccessf | ||
| 000006a0:· | 000006a0:·756c·2d6f·776e·6572·2d63·6861·6e67·650a··ul-owner-change. | ||
| 000006b0:· | 000006b0:·2d61·2061·6c77·6179·732c·6578·6974·202d··-a·always,exit·- | ||
| 000006c0:· | 000006c0:·4620·6172·6368·3d62·3332·202d·5320·6c63··F·arch=b32·-S·lc | ||
| 000006d0:· | 000006d0:·686f·776e·2c66·6368·6f77·6e2c·6368·6f77··hown,fchown,chow | ||
| 000006e0:· | 000006e0:·6e2c·6663·686f·776e·6174·202d·4620·6578··n,fchownat·-F·ex | ||
| 000006f0:· | 000006f0:·6974·3d2d·4550·4552·4d20·2d46·2061·7569··it=-EPERM·-F·aui | ||
| 00000700:·6 | 00000700:·6426·6774·3b3d·3130·3030·202d·4620·6175··d>=1000·-F·au | ||
| 00000710:· | 00000710:·6964·213d·756e·7365·7420·2d46·206b·6579··id!=unset·-F·key | ||
| 00000720:· | 00000720:·3d75·6e73·7563·6365·7373·6675·6c2d·6f77··=unsuccessful-ow | ||
| 00000730:· | 00000730:·6e65·722d·6368·616e·6765·0a2d·6120·616c··ner-change.-a·al | ||
| 00000740:· | 00000740:·7761·7973·2c65·7869·7420·2d46·2061·7263··ways,exit·-F·arc | ||
| 00000750:· | 00000750:·683d·6236·3420·2d53·206c·6368·6f77·6e2c··h=b64·-S·lchown, | ||
| 00000760:·6 | 00000760:·6663·686f·776e·2c63·686f·776e·2c66·6368··fchown,chown,fch | ||
| 00000770:· | 00000770:·6f77·6e61·7420·2d46·2065·7869·743d·2d45··ownat·-F·exit=-E | ||
| 00000780:· | 00000780:·5045·524d·202d·4620·6175·6964·2667·743b··PERM·-F·auid> | ||
| 00000790:· | 00000790:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000007a0:· | 000007a0:·6e73·6574·202d·4620·6b65·793d·756e·7375··nset·-F·key=unsu | ||
| 000007b0:·63 | 000007b0:·6363·6573·7366·756c·2d6f·776e·6572·2d63··ccessful-owner-c | ||
| 000007c0:·6 | 000007c0:·6861·6e67·6520·2020·203c·2f70·7265·3e0a··hange····</pre>. | ||
| 000007d0:· | 000007d0:·0a4c·6f61·6420·6e65·7720·4175·6469·7420··.Load·new·Audit· | ||
| 000007e0:· | 000007e0:·7275·6c65·7320·696e·746f·206b·6572·6e65··rules·into·kerne | ||
| 000007f0:·6 | 000007f0:·6c20·6279·2072·756e·6e69·6e67·3a0a·3c70··l·by·running:.<p | ||
| 00000800:· | 00000800:·7265·3e61·7567·656e·7275·6c65·7320·2d2d··re>augenrules·-- | ||
| 00000810:· | 00000810:·6c6f·6164·3c2f·7072·653e·0a0a·4e6f·7465··load</pre>..Note | ||
| 00000820:·3 | 00000820:·3a20·5468·6973·2072·756c·6520·7573·6573··:·This·rule·uses | ||
| 00000830:·20 | 00000830:·2061·2073·7065·6369·616c·2073·6574·206f···a·special·set·o | ||
| 00000840:·6 | 00000840:·6620·4175·6469·7420·7275·6c65·7320·746f··f·Audit·rules·to | ||
| 00000850:·2 | 00000850:·2063·6f6d·706c·7920·7769·7468·204f·5350···comply·with·OSP | ||
| 00000860:· | 00000860:·5020·342e·322e·312e·2059·6f75·206d·6179··P·4.2.1.·You·may | ||
| 00000870:·0 | 00000870:·2072·6575·7365·2074·6869·7320·7275·6c65···reuse·this·rule | ||
| 00000880:· | 00000880:·2069·6e20·6469·6666·6572·656e·7420·7072···in·different·pr | ||
| 00000890:·6 | 00000890:·6f66·696c·6573·2e20·4966·2079·6f75·2064··ofiles.·If·you·d | ||
| 000008a0:·6 | 000008a0:·6563·6964·6520·746f·2064·6f20·736f·2c20··ecide·to·do·so,· | ||
| 000008b0:· | 000008b0:·6974·2069·7320·7265·636f·6d6d·656e·6465··it·is·recommende | ||
| 000008c0:· | 000008c0:·6420·7468·6174·2079·6f75·2069·6e73·7065··d·that·you·inspe | ||
| 000008d0:· | 000008d0:·6374·2063·6f6e·7465·6e74·7320·6f66·2074··ct·contents·of·t | ||
| 000008e0:· | 000008e0:·6865·2066·696c·6520·636c·6f73·656c·7920··he·file·closely· | ||
| 000008f0:·6 | 000008f0:·616e·6420·6d61·6b65·2073·7572·6520·7468··and·make·sure·th | ||
| 00000900:·6 | 00000900:·6174·2074·6865·7920·6172·6520·616c·6c69··at·they·are·alli | ||
| 00000910:· | 00000910:·676e·6564·2077·6974·6820·796f·7572·206e··gned·with·your·n | ||
| 00000920:· | 00000920:·6565·6473·2e0a·2020·2020·2020·3c2f·7464··eeds..······</td | ||
| 00000930:· | 00000930:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | ||
| 00000940:· | 00000940:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | ||
| 00000950:· | 00000950:·2020·2020·2020·556e·7375·6363·6573·7366········Unsuccessf | ||
| 00000960:·7 | 00000960:·756c·2061·7474·656d·7074·7320·746f·2063··ul·attempts·to·c | ||
| 00000970:· | 00000970:·6861·6e67·6520·616e·206f·776e·6572·7368··hange·an·ownersh | ||
| 00000980:·6 | 00000980:·6970·206f·6620·6669·6c65·7320·6f72·2064··ip·of·files·or·d | ||
| 00000990:·6 | 00000990:·6972·6563·746f·7269·6573·206d·6967·6874··irectories·might | ||
| 000009a0:· | 000009a0:·2062·6520·7369·676e·7320·6f66·2061·206d···be·signs·of·a·m | ||
| 000009b0:· | 000009b0:·616c·6963·696f·7573·2061·6374·6976·6974··alicious·activit | ||
| 000009c0:· | 000009c0:·792e·2048·6176·696e·6720·7375·6368·2065··y.·Having·such·e | ||
| 000009d0:·7 | 000009d0:·7665·6e74·7320·6175·6469·7465·6420·6865··vents·audited·he | ||
| 000009e0:·6 | 000009e0:·6c70·7320·696e·206d·6f6e·6974·6f72·696e··lps·in·monitorin | ||
| 000009f0:·6 | 000009f0:·6720·616e·6420·696e·7665·7374·6967·6174··g·and·investigat | ||
| 00000a00:·6 | 00000a00:·696f·6e20·6f66·2073·7563·6820·6163·7469··ion·of·such·acti | ||
| 00000a10:· | 00000a10:·7669·7469·6573·2e0a·2020·2020·2020·3c2f··vities..······</ | ||
| 00000a20:·6 | 00000a20:·7464·3e0a·2020·2020·3c2f·7472·3e0a·2020··td>.····</tr>.·· | ||
| 00000a30:·20 | 00000a30:·2020·3c74·723e·0a20·2020·2020·203c·7464····<tr>.······<td | ||
| 00000a40:· | 00000a40:·3e41·552d·3228·6129·3c2f·7464·3e0a·2020··>AU-2(a)</td>.·· | ||
| 00000a50:· | 00000a50:·2020·2020·3c74·643e·436f·6e66·6967·7572······<td>Configur | ||
| 00000a60:·6 | 00000a60:·6520·6175·6469·7469·6e67·206f·6620·756e··e·auditing·of·un | ||
| 00000a70:· | 00000a70:·7375·6363·6573·7366·756c·2066·696c·6520··successful·file· | ||
| 00000a80:·6 | 00000a80:·6372·6561·7469·6f6e·7320·2841·4172·6368··creations·(AArch | ||
| 00000a90:· | 00000a90:·3634·293c·2f74·643e·0a20·2020·2020·203c··64)</td>.······< | ||
| 00000aa0:· | 00000aa0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000ab0:· | 00000ab0:·5553·223e·0a20·2020·2020·2020·2045·6e73··US">.········Ens | ||
| 00000ac0:·75 | 00000ac0:·7572·6520·7468·6174·2075·6e73·7563·6365··ure·that·unsucce | ||
| 00000ad0:· | 00000ad0:·7373·6675·6c20·6174·7465·6d70·7473·2074··ssful·attempts·t | ||
| 00000ae0:· | 00000ae0:·6f20·6372·6561·7465·2061·2066·696c·6520··o·create·a·file· | ||
| 00000af0:· | 00000af0:·6172·6520·6175·6469·7465·642e·0a0a·5468··are·audited...Th | ||
| 00000b00:·6 | 00000b00:·6520·666f·6c6c·6f77·696e·6720·7275·6c65··e·following·rule | ||
| 00000b10:· | 00000b10:·7320·636f·6e66·6967·7572·6520·6175·6469··s·configure·audi | ||
| 00000b20:· | 00000b20:·7420·6173·2064·6573·6372·6962·6564·2061··t·as·described·a | ||
| 00000b30:· | 00000b30:·626f·7665·3a0a·3c70·7265·3e23·2320·556e··bove:.<pre>##·Un | ||
| 00000b40:· | 00000b40:·7375·6363·6573·7366·756c·2066·696c·6520··successful·file· | ||
| 00000b50:·3 | 00000b50:·6372·6561·7469·6f6e·2028·6f70·656e·2077··creation·(open·w | ||
| 00000b60:· | 00000b60:·6974·6820·4f5f·4352·4541·5429·0a2d·6120··ith·O_CREAT).-a· | ||
| 00000b70:·61 | 00000b70:·616c·7761·7973·2c65·7869·7420·2d46·2061··always,exit·-F·a | ||
| 00000b80:·7 | 00000b80:·7263·683d·6233·3220·2d53·206f·7065·6e61··rch=b32·-S·opena | ||
| 00000b90:· | 00000b90:·742c·6f70·656e·5f62·795f·6861·6e64·6c65··t,open_by_handle | ||
| 00000ba0:· | 00000ba0:·5f61·7420·2d46·2061·3226·616d·703b·3031··_at·-F·a2&01 | ||
| 00000bb0:·3 | 00000bb0:·3030·202d·4620·6578·6974·3d2d·4541·4343··00·-F·exit=-EACC | ||
| 00000bc0:· | 00000bc0:·4553·202d·4620·6175·6964·3e3d·3130·3030··ES·-F·auid>=1000 | ||
| Max diff block lines reached; 5370439/7432047 bytes (72.26%) of diff not shown. | |||
| Offset 73, 14 lines modified | Offset 73, 28 lines modified | ||
| 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all | 73 | is·the·only·place·that·loopback·network·traffic·should·be·seen,·all |
| 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an | 74 | other·interfaces·should·ignore·traffic·on·this·network·as·an |
| 75 | anti-spoofing·measure. | 75 | anti-spoofing·measure. |
| 76 | ······</td> | 76 | ······</td> |
| 77 | ····</tr> | 77 | ····</tr> |
| 78 | ····<tr> | 78 | ····<tr> |
| 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | 79 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> |
| 80 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 81 | ······<td·xml:lang="en-US"> | ||
| 82 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 83 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 84 | ······</td> | ||
| 85 | ······<td·xml:lang="en-US"> | ||
| 86 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 87 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 88 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 89 | the·network. | ||
| 90 | ······</td> | ||
| 91 | ····</tr> | ||
| 92 | ····<tr> | ||
| 93 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 80 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> | 94 | ······<td>Ensure·IPv6·is·disabled·through·kernel·boot·parameter</td> |
| 81 | ······<td·xml:lang="en-US"> | 95 | ······<td·xml:lang="en-US"> |
| 82 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, | 96 | ········To·disable·IPv6·protocol·support·in·the·Linux·kernel, |
| 83 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default | 97 | add·the·argument·<tt>ipv6.disable=1</tt>·to·the·default |
| 84 | GRUB2·command·line·for·the·Linux·operating·system. | 98 | GRUB2·command·line·for·the·Linux·operating·system. |
| 85 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line | 99 | To·ensure·that·<tt>ipv6.disable=1</tt>·is·added·as·a·kernel·command·line |
| 86 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the | 100 | argument·to·newly·installed·kernels,·add·<tt>ipv6.disable=1</tt>·to·the |
| Offset 91, 28 lines modified | Offset 105, 14 lines modified | ||
| 91 | ······</td> | 105 | ······</td> |
| 92 | ······<td·xml:lang="en-US"> | 106 | ······<td·xml:lang="en-US"> |
| 93 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce | 107 | ········Any·unnecessary·network·stacks,·including·IPv6,·should·be·disabled·to·reduce |
| 94 | the·vulnerability·to·exploitation. | 108 | the·vulnerability·to·exploitation. |
| 95 | ······</td> | 109 | ······</td> |
| 96 | ····</tr> | 110 | ····</tr> |
| 97 | ····<tr> | 111 | ····<tr> |
| 98 | ······<td>Req-1.3.1<br/>Req-1.3.2</td> | ||
| 99 | ······<td>Disable·Kernel·Parameter·for·IP·Forwarding·on·IPv4·Interfaces</td> | ||
| 100 | ······<td·xml:lang="en-US"> | ||
| 101 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.ip_forward</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.ip_forward=0</pre> | ||
| 102 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.ip_forward·=·0</pre> | ||
| 103 | ······</td> | ||
| 104 | ······<td·xml:lang="en-US"> | ||
| 105 | ········Routing·protocol·daemons·are·typically·used·on·routers·to·exchange | ||
| 106 | network·topology·information·with·other·routers.·If·this·capability·is·used·when | ||
| 107 | not·required,·system·network·information·may·be·unnecessarily·transmitted·across | ||
| 108 | the·network. | ||
| 109 | ······</td> | ||
| 110 | ····</tr> | ||
| 111 | ····<tr> | ||
| 112 | ······<td>Req-1.3.3</td> | 112 | ······<td>Req-1.3.3</td> |
| 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> | 113 | ······<td>Deactivate·Wireless·Network·Interfaces</td> |
| 114 | ······<td·xml:lang="en-US"> | 114 | ······<td·xml:lang="en-US"> |
| 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless | 115 | ········Deactivating·wireless·network·interfaces·should·prevent·normal·usage·of·the·wireless |
| 116 | capability. | 116 | capability. |
| 117 | <br·/><br·/> | 117 | <br·/><br·/> |
| Offset 157, 26 lines modified | Offset 157, 24 lines modified | ||
| 157 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all |
| 159 | packets·to·these·ports. | 159 | packets·to·these·ports. |
| 160 | ······</td> | 160 | ······</td> |
| 161 | ····</tr> | 161 | ····</tr> |
| 162 | ····<tr> | 162 | ····<tr> |
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td> | 164 | ······<td>Install·iptables·Package</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········Configure·the·loopback·interface·to·accept·traffic. | ||
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 168 | netwo | 166 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: |
| 167 | <pre> | ||
| 168 | $·sudo·yum·install·iptables</pre> | ||
| 169 | ······</td> | 169 | ······</td> |
| 170 | ······<td·xml:lang="en-US"> | 170 | ······<td·xml:lang="en-US"> |
| 171 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 172 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 173 | masquerading,·etc. | ||
| 171 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | ||
| 172 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 173 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 174 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 175 | anti-spoofing·measure. | ||
| 176 | ······</td> | 174 | ······</td> |
| 177 | ····</tr> | 175 | ····</tr> |
| 178 | ····<tr> | 176 | ····<tr> |
| 179 | ······<td>Req-1.4.1</td> | 177 | ······<td>Req-1.4.1</td> |
| 180 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> | 178 | ······<td>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</td> |
| 181 | ······<td·xml:lang="en-US"> | 179 | ······<td·xml:lang="en-US"> |
| 182 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> | 180 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.tcp_syncookies</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.tcp_syncookies=1</pre> |
| Offset 189, 24 lines modified | Offset 187, 26 lines modified | ||
| 189 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood | 187 | verifying·the·initiator·is·attempting·a·valid·connection·and·is·not·a·flood |
| 190 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and | 188 | source.·This·feature·is·activated·when·a·flood·condition·is·detected,·and |
| 191 | enables·the·system·to·continue·servicing·valid·connection·requests. | 189 | enables·the·system·to·continue·servicing·valid·connection·requests. |
| 192 | ······</td> | 190 | ······</td> |
| 193 | ····</tr> | 191 | ····</tr> |
| 194 | ····<tr> | 192 | ····<tr> |
| 195 | ······<td>Req-1.4.1</td> | 193 | ······<td>Req-1.4.1</td> |
| 196 | ······<td> | 194 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 197 | ······<td·xml:lang="en-US"> | 195 | ······<td·xml:lang="en-US"> |
| 198 | ········The·<code>iptables</code>·package·can·be·installed·with·the·following·command: | ||
| 199 | <pre> | ||
| 200 | 196 | ········Configure·the·loopback·interface·to·accept·traffic. | |
| 197 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | ||
| 198 | network. | ||
| 201 | ······</td> | 199 | ······</td> |
| 202 | ······<td·xml:lang="en-US"> | 200 | ······<td·xml:lang="en-US"> |
| 203 | ········<tt>iptables</tt>·controls·the·Linux·kernel·network·packet·filtering | ||
| 204 | code.·<tt>iptables</tt>·allows·system·operators·to·set·up·firewalls·and·IP | ||
| 205 | 201 | ········Loopback·traffic·is·generated·between·processes·on·machine·and·is | |
| 202 | typically·critical·to·operation·of·the·system.·The·loopback·interface | ||
| 203 | is·the·only·place·that·loopback·network·traffic·should·be·seen, | ||
| 204 | all·other·interfaces·should·ignore·traffic·on·this·network·as·an | ||
| 205 | anti-spoofing·measure. | ||
| 206 | ······</td> | 206 | ······</td> |
| 207 | ····</tr> | 207 | ····</tr> |
| 208 | ····<tr> | 208 | ····<tr> |
| 209 | ······<td>Req-1.4.2</td> | 209 | ······<td>Req-1.4.2</td> |
| 210 | ······<td>Disable·SCTP·Support</td> | 210 | ······<td>Disable·SCTP·Support</td> |
| 211 | ······<td·xml:lang="en-US"> | 211 | ······<td·xml:lang="en-US"> |
| 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 212 | ········The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| Offset 246, 40 lines modified | Offset 246, 23 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| Max diff block lines reached; 297115/302958 bytes (98.07%) of diff not shown. | |||
| Offset 34, 26 lines modified | Offset 34, 14 lines modified | ||
| 34 | ····················································································network·traffic | 34 | ····················································································network·traffic |
| 35 | ····················································································should·be·seen,·all | 35 | ····················································································should·be·seen,·all |
| 36 | ····················································································other·interfaces | 36 | ····················································································other·interfaces |
| 37 | ····················································································should·ignore | 37 | ····················································································should·ignore |
| 38 | ····················································································traffic·on·this | 38 | ····················································································traffic·on·this |
| 39 | ····················································································network·as·an·anti- | 39 | ····················································································network·as·an·anti- |
| 40 | ····················································································spoofing·measure. | 40 | ····················································································spoofing·measure. |
| 41 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 42 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 43 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 44 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 45 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 46 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 47 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 48 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 49 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 50 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 51 | ·····························already·installed·kernels: | ||
| 52 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 53 | ····················································································Routing·protocol | 41 | ····················································································Routing·protocol |
| 54 | ····················································································daemons·are | 42 | ····················································································daemons·are |
| 55 | ····················································································typically·used·on | 43 | ····················································································typically·used·on |
| 56 | ····················································································routers·to·exchange | 44 | ····················································································routers·to·exchange |
| 57 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology | 45 | ·····························To·set·the·runtime·status·of·the·net.ipv4.ip_forward···network·topology |
| 58 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with | 46 | Req-·····Disable·Kernel······kernel·parameter,·run·the·following·command:···········information·with |
| 59 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If | 47 | 1.3.1····Parameter·for·IP····$·sudo·sysctl·-w·net.ipv4.ip_forward=0·················other·routers.·If |
| Offset 61, 14 lines modified | Offset 49, 26 lines modified | ||
| 61 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not | 49 | 1.3.2····Interfaces··········following·line·to·a·file·in·the·directory·/etc/········used·when·not |
| 62 | ·····························sysctl.d:··············································required,·system | 50 | ·····························sysctl.d:··············································required,·system |
| 63 | ·····························net.ipv4.ip_forward·=·0································network·information | 51 | ·····························net.ipv4.ip_forward·=·0································network·information |
| 64 | ····················································································may·be | 52 | ····················································································may·be |
| 65 | ····················································································unnecessarily | 53 | ····················································································unnecessarily |
| 66 | ····················································································transmitted·across | 54 | ····················································································transmitted·across |
| 67 | ····················································································the·network. | 55 | ····················································································the·network. |
| 56 | ·····························To·disable·IPv6·protocol·support·in·the·Linux·kernel, | ||
| 57 | ·····························add·the·argument·ipv6.disable=1·to·the·default·GRUB2 | ||
| 58 | ·····························command·line·for·the·Linux·operating·system.·To·ensure·Any·unnecessary | ||
| 59 | ·····························that·ipv6.disable=1·is·added·as·a·kernel·command·line··network·stacks, | ||
| 60 | Req-·····Ensure·IPv6·is······argument·to·newly·installed·kernels,·add···············including·IPv6, | ||
| 61 | 1.3.1····disabled·through····ipv6.disable=1·to·the·default·Grub2·command·line·for···should·be·disabled | ||
| 62 | Req-·····kernel·boot·········Linux·operating·systems.·Modify·the·line·within·/etc/··to·reduce·the | ||
| 63 | 1.3.2····parameter···········default/grub·as·shown·below:···························vulnerability·to | ||
| 64 | ·····························GRUB_CMDLINE_LINUX="...·ipv6.disable=1·..."············exploitation. | ||
| 65 | ·····························Run·the·following·command·to·update·command·line·for | ||
| 66 | ·····························already·installed·kernels: | ||
| 67 | ·····························#·grubby·--update-kernel=ALL·--args="ipv6.disable=1" | ||
| 68 | ····················································································The·use·of·wireless | 68 | ····················································································The·use·of·wireless |
| 69 | ····················································································networking·can | 69 | ····················································································networking·can |
| 70 | ····················································································introduce·many | 70 | ····················································································introduce·many |
| 71 | ····················································································different·attack | 71 | ····················································································different·attack |
| 72 | ····················································································vectors·into·the | 72 | ····················································································vectors·into·the |
| 73 | ····················································································organization's | 73 | ····················································································organization's |
| 74 | ····················································································network.·Common | 74 | ····················································································network.·Common |
| Offset 112, 31 lines modified | Offset 112, 23 lines modified | ||
| 112 | ····················································································Without·a·firewall | 112 | ····················································································Without·a·firewall |
| 113 | ····················································································rule·configured·for | 113 | ····················································································rule·configured·for |
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default |
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy |
| 116 | ·········open·ports·································································will·drop·all | 116 | ·········open·ports·································································will·drop·all |
| 117 | ····················································································packets·to·these | 117 | ····················································································packets·to·these |
| 118 | ····················································································ports. | 118 | ····················································································ports. |
| 119 | ····················································································Loopback·traffic·is | ||
| 120 | ····················································································generated·between | ||
| 121 | ····················································································p | 119 | ····················································································iptables·controls |
| 122 | ···················································································· | 120 | ····················································································the·Linux·kernel |
| 123 | ····················································································typically·critical | ||
| 124 | ····················································································to·operation·of·the | ||
| 125 | ····················································································system.·The | ||
| 126 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 127 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 128 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 129 | ····················································································network· | 121 | ····················································································network·packet |
| 122 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 123 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 124 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 130 | ····················································································s | 125 | ····················································································set·up·firewalls |
| 131 | ····················································································other·interfaces | ||
| 132 | ···················································································· | 126 | ····················································································and·IP |
| 133 | ····················································································traffic·on·this | ||
| 134 | ····················································································network·as·an·anti- | ||
| 135 | ····················································································s | 127 | ····················································································masquerading,·etc. |
| 136 | ····················································································A·TCP·SYN·flood | 128 | ····················································································A·TCP·SYN·flood |
| 137 | ····················································································attack·can·cause·a | 129 | ····················································································attack·can·cause·a |
| 138 | ····················································································denial·of·service | 130 | ····················································································denial·of·service |
| 139 | ····················································································by·filling·a | 131 | ····················································································by·filling·a |
| 140 | ····················································································system's·TCP | 132 | ····················································································system's·TCP |
| 141 | ····················································································connection·table | 133 | ····················································································connection·table |
| 142 | ····················································································with·connections·in | 134 | ····················································································with·connections·in |
| Offset 155, 23 lines modified | Offset 147, 31 lines modified | ||
| 155 | ····················································································flood·condition·is | 147 | ····················································································flood·condition·is |
| 156 | ····················································································detected,·and | 148 | ····················································································detected,·and |
| 157 | ····················································································enables·the·system | 149 | ····················································································enables·the·system |
| 158 | ····················································································to·continue | 150 | ····················································································to·continue |
| 159 | ····················································································servicing·valid | 151 | ····················································································servicing·valid |
| 160 | ····················································································connection | 152 | ····················································································connection |
| 161 | ····················································································requests. | 153 | ····················································································requests. |
| 154 | ····················································································Loopback·traffic·is | ||
| 155 | ····················································································generated·between | ||
| 162 | ···················································································· | 156 | ····················································································processes·on |
| 157 | ····················································································machine·and·is | ||
| 158 | ····················································································typically·critical | ||
| 159 | ····················································································to·operation·of·the | ||
| 163 | ···················································································· | 160 | ····················································································system.·The |
| 161 | Req-·····Set·nftables········Configure·the·loopback·interface·to·accept·traffic.····loopback·interface | ||
| 162 | 1.4.1····Configuration·for···Configure·all·other·interfaces·to·deny·traffic·to·the··is·the·only·place | ||
| 163 | ·········Loopback·Traffic····loopback·network.······································that·loopback | ||
| 164 | ····················································································network· | 164 | ····················································································network·traffic |
| 165 | ····················································································should·be·seen,·all | ||
| 166 | ····················································································other·interfaces | ||
| 165 | Req-·····Install·iptables····The·iptables·package·can·be·installed·with·the·········filtering·code. | ||
| 166 | 1.4.1····Package·············following·command:·····································iptables·allows | ||
| 167 | ·····························$·sudo·yum·install·iptables····························system·operators·to | ||
| 168 | ····················································································s | 167 | ····················································································should·ignore |
| 169 | ····················································································an | 168 | ····················································································traffic·on·this |
| 169 | ····················································································network·as·an·anti- | ||
| 170 | ···················································································· | 170 | ····················································································spoofing·measure. |
| 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a | 171 | ·····························The·Stream·Control·Transmission·Protocol·(SCTP)·is·a |
| 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea | 172 | ·····························transport·layer·protocol,·designed·to·support·the·idea |
| 173 | ·····························of·message-oriented·communication,·with·several | 173 | ·····························of·message-oriented·communication,·with·several |
| 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP | 174 | ·····························streams·of·messages·within·one·connection.·To··········Disabling·SCTP |
| 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system | 175 | ·····························configure·the·system·to·prevent·the·sctp·kernel·module·protects·the·system |
| 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against | 176 | Req-·····Disable·SCTP········from·being·loaded,·add·the·following·line·to·the·file··against |
| 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any | 177 | 1.4.2····Support·············/etc/modprobe.d/sctp.conf:·····························exploitation·of·any |
| Offset 187, 54 lines modified | Offset 187, 24 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| Max diff block lines reached; 482721/496308 bytes (97.26%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Oracle·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Oracle·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Oracle·Linux·8·V2R3.</xccdf-1.2:description> | 7 | DISA·STIG·for·Oracle·Linux·8·V2R3.</xccdf-1.2:description> |
| 8 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_have_homedir_login_defs"·selected="false"/> | 8 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_have_homedir_login_defs"·selected="false"/> |
| 9 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_logon_fail_delay"·selected="false"/> | 9 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_logon_fail_delay"·selected="false"/> |
| 10 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_max_concurrent_login_sessions"·selected="false"/> | 10 | ····<xccdf-1.2:select·idref="xccdf_org.ssgproject.content_rule_accounts_max_concurrent_login_sessions"·selected="false"/> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V2R2. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V2R2. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·this |
| 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="2025-0 | 3 | ··<xccdf-1.2:version·time="2025-03-01T22:08:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·9</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·9</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·9·V2R3. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·9·V2R3. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·9,·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·9,·this |
| 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·is·applicable·to·the·operating·system·tier·of |
| Offset 3, 5931 lines modified | Offset 3, 6597 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> | ||
| 11 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_renameat_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_passwd_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Verify·User·Who·Owns·passwd·File</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-s | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchownat_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchownat</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-s | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchownat_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-selinux_policytype_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Configure·SELinux·Policy</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-selinux_policytype_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_home_directories_ocil:questionnaire:1"> | ||
| 41 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_group_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Permissions·on·Backup·group·File</ocil:title> | ||
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-file_ | 37 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_interactive_home_directory_exists_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_crontab_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Verify·Group·Who·Owns·Crontab</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_crontab_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 53 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_audit_configuration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Audit·Configuration·Files·Must·Be·Owned·By·Group·root</ocil:title> | ||
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-file_ | 49 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_truncate_ocil:questionnaire:1"> | ||
| 59 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_tmp_nosuid_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Add·nosuid·Option·to·/var/tmp</ocil:title> | ||
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_tmp_nosuid_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_r | 58 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting· | 59 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv4·Interfaces·by·Default</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_r | 61 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_home_directories_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Be·Owned·By·The·Primary·User</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_home_directories_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure· | 71 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-no_shelllogin_for_systemaccounts_ocil:questionnaire:1"> | ||
| 83 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-service_nftables_disabled_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify·nftables·Service·is·Disabled</ocil:title> | ||
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-service_nftables_disabled_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> | ||
| 89 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faillock_unlock_time_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Set·Lockout·Time·for·Failed·Password·Attempts</ocil:title> | ||
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-au | 85 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_faillock_unlock_time_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_audit_configuration_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Audit·Configuration·Files·Must·Be·Owned·By·Root</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_files_ownership_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Ensure·Log·Files·Are·Owned·By·Appropriate·User</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_files_ownership_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_create_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Unloading·-·create_module</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_create_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_query_ocil:questionnaire:1"> | ||
| 119 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-package_libselinux_installed_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Install·libselinux·Package</ocil:title> | ||
| Max diff block lines reached; 724365/736617 bytes (98.34%) of diff not shown. | |||
| Offset 3, 6172 lines modified | Offset 3, 6029 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_d_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·Owner·on·cron. | 11 | ······<ocil:title>Verify·Owner·on·cron.d</ocil:title> |
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_weekly_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Disallow·Configuration·to·Bypass·Password·Requirements·for·Privilege·Escalation</ocil:title> | ||
| 24 | ······<ocil:actions> | ||
| 25 | ········<ocil:test_action_ref>ocil:ssg-disallow_bypass_password_sudo_action:testaction:1</ocil:test_action_ref> | ||
| 26 | ······</ocil:actions> | ||
| 27 | ····</ocil:questionnaire> | ||
| 28 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_FIPS_certified_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>The·Installed·Operating·System·Is·FIPS·140-2·Certified</ocil:title> | ||
| 30 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_d_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_d_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Group·Who·Owns·cron.d</ocil:title> |
| 36 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_d_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-package_ntp_installed_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 23 | ······<ocil:title>Install·the·ntp·service</ocil:title> |
| 42 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-package_ntp_installed_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> | ||
| 47 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_route_localnet_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Prevent·Routing·External·Traffic·to·Local·Loopback·on·All·IPv4·Interfaces</ocil:title> | ||
| 48 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_route_localnet_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_command_negation_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 35 | ······<ocil:title>Don't·define·allowed·commands·in·sudoers·by·means·of·exclusion</ocil:title> |
| 54 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sudoers_no_command_negation_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_monthly_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 41 | ······<ocil:title>Verify·Group·Who·Owns·cron.monthly</ocil:title> |
| 60 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_stig_ocil:questionnaire:1"> | ||
| 65 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dcredit_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Digit·Characters</ocil:title> | ||
| 66 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dcredit_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_local_events_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 53 | ······<ocil:title>Include·Local·Events·in·Audit·Logs</ocil:title> |
| 72 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-auditd_local_events_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_adjtimex_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 59 | ······<ocil:title>Record·attempts·to·alter·time·through·adjtimex</ocil:title> |
| 78 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_adjtimex_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_warn_age_login_defs_ocil:questionnaire:1"> | ||
| 83 | ····· | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount</ocil:title> | ||
| 84 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-a | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-dir_ownership_binary_dirs_ocil:questionnaire:1"> | ||
| 89 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-package_xorg-x11-server-common_removed_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Remove·the·X·Windows·Package·Group</ocil:title> | ||
| 90 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-package_xorg-x11-server-common_removed_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_use_priv_separation_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>En | 77 | ······<ocil:title>Enable·Use·of·Privilege·Separation</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_use_priv_separation_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_defaultnetstreamdriver_ocil:questionnaire:1"> | ||
| 101 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_library_dirs_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify·that·Shared·Library·Files·Have·Root·Ownership</ocil:title> | ||
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-dir_ownership_library_dirs_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 89 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Root·Ownership</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-dir_ownership_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-service_abrtd_disabled_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 95 | ······<ocil:title>Disable·Automatic·Bug·Reporting·Tool·(abrtd)</ocil:title> |
| 114 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-service_abrtd_disabled_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-auditd_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Configure·auditd· | 101 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> |
| 120 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-auditd_ | 103 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_error_action_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-grub2_audit_argument_ocil:questionnaire:1"> |
| Max diff block lines reached; 863096/875037 bytes (98.64%) of diff not shown. | |||
| Offset 71, 226 lines modified | Offset 71, 226 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> | ||
| 78 | ····<cpe-lang:platform·id="package_shadow-utils"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="system_with_kernel"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 82 | ········</cpe-lang:logical-test> | ||
| 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_audit"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | ||
| 97 | ····</cpe-lang:platform> | ||
| 98 | ····<cpe-lang:platform·id="package_pam"> | ||
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="not_bootc"> | 88 | ····<cpe-lang:platform·id="not_bootc"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 109 | ······<cpe-lang:logical-test·operator=" | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 98 | ····<cpe-lang:platform·id="package_postfix"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 104 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | ||
| 108 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="package_ | 109 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 130 | ········</cpe-lang:logical-test> | ||
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········ | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 133 | ········< | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="not_ | 120 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 140 | ········</cpe-lang:logical-test> | 124 | ········</cpe-lang:logical-test> |
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | 127 | ········</cpe-lang:logical-test> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="a | 135 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_systemd"> | 148 | ····<cpe-lang:platform·id="package_systemd"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="package_ | 153 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_ | 159 | ····<cpe-lang:platform·id="package_iptables"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 164 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 181 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| Max diff block lines reached; 658330/671854 bytes (97.99%) of diff not shown. | |||
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-alinux3-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-alinux3-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:alinux:alibaba_cloud_linux:3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Alibaba·Cloud·Linux·3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml">oval:ssg-installed_OS_is_alinux3:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml">oval:ssg-installed_OS_is_alinux3:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-alinux3-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 40 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 104, 217 lines modified | Offset 104, 217 lines modified | ||
| 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 104 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 105 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 106 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 107 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 108 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 109 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 110 | ······<cpe-lang:platform-specification> | 110 | ······<cpe-lang:platform-specification> |
| 111 | ········<cpe-lang:platform·id=" | 111 | ········<cpe-lang:platform·id="wifi-iface"> |
| 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 114 | ··········</cpe-lang:logical-test> | 114 | ··········</cpe-lang:logical-test> |
| 115 | ········</cpe-lang:platform> | 115 | ········</cpe-lang:platform> |
| 116 | ········<cpe-lang:platform·id=" | 116 | ········<cpe-lang:platform·id="not_bootc"> |
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 119 | ··········</cpe-lang:logical-test> | ||
| 120 | ········</cpe-lang:platform> | ||
| 121 | ········<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 124 | ··········</cpe-lang:logical-test> | ||
| 125 | ········</cpe-lang:platform> | ||
| 126 | ········<cpe-lang:platform·id="package_postfix"> | ||
| 117 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 119 | ··········</cpe-lang:logical-test> | 129 | ··········</cpe-lang:logical-test> |
| 120 | ········</cpe-lang:platform> | 130 | ········</cpe-lang:platform> |
| 131 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 132 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 134 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 135 | ··········</cpe-lang:logical-test> | ||
| 136 | ········</cpe-lang:platform> | ||
| 121 | ········<cpe-lang:platform·id="package_ | 137 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 122 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 124 | ··········</cpe-lang:logical-test> | 140 | ··········</cpe-lang:logical-test> |
| 125 | ········</cpe-lang:platform> | 141 | ········</cpe-lang:platform> |
| 126 | ········<cpe-lang:platform·id="package_audit"> | 142 | ········<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 127 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_au | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 129 | ··········</cpe-lang:logical-test> | 146 | ··········</cpe-lang:logical-test> |
| 130 | ········</cpe-lang:platform> | 147 | ········</cpe-lang:platform> |
| 131 | ········<cpe-lang:platform·id=" | 148 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 132 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 152 | ············</cpe-lang:logical-test> | ||
| 153 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 154 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 155 | ············</cpe-lang:logical-test> | ||
| 134 | ··········</cpe-lang:logical-test> | 156 | ··········</cpe-lang:logical-test> |
| 135 | ········</cpe-lang:platform> | 157 | ········</cpe-lang:platform> |
| 136 | ········<cpe-lang:platform·id=" | 158 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 137 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 159 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 161 | ··········</cpe-lang:logical-test> | ||
| 162 | ········</cpe-lang:platform> | ||
| 163 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 164 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 165 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 139 | ··········</cpe-lang:logical-test> | 167 | ··········</cpe-lang:logical-test> |
| 140 | ········</cpe-lang:platform> | 168 | ········</cpe-lang:platform> |
| 141 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 169 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 142 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 146 | ··········</cpe-lang:logical-test> | 174 | ··········</cpe-lang:logical-test> |
| 147 | ········</cpe-lang:platform> | 175 | ········</cpe-lang:platform> |
| 148 | ········<cpe-lang:platform·id="package_ | 176 | ········<cpe-lang:platform·id="package_systemd"> |
| 149 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 153 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 180 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id="package_ | 181 | ········<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 158 | ··········</cpe-lang:logical-test> | 185 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 186 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id=" | 187 | ········<cpe-lang:platform·id="package_iptables"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ············ | 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 164 | ············</cpe-lang:logical-test> | ||
| 165 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 166 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 167 | ············</cpe-lang:logical-test> | ||
| 168 | ··········</cpe-lang:logical-test> | 190 | ··········</cpe-lang:logical-test> |
| 169 | ········</cpe-lang:platform> | 191 | ········</cpe-lang:platform> |
| 170 | ········<cpe-lang:platform·id=" | 192 | ········<cpe-lang:platform·id="ipv6_enabled"> |
| 171 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 193 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 173 | ············ | 194 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 174 | ············</cpe-lang:logical-test> | ||
| 175 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 176 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 177 | ············</cpe-lang:logical-test> | ||
| Max diff block lines reached; 1556670/1570275 bytes (99.13%) of diff not shown. | |||
| Offset 3, 5918 lines modified | Offset 3, 6068 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_use_pty_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·use_pty</ocil:title> | ||
| 11 | ······<ocil:title>Ensure·SELinux·Not·Disabled·in·/etc/default/grub</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_enable_selinux_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_devkmem_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Disable·/dev/kmem·virtual·device·support</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_use_pty_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-auditd_log_format_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Resolve·information·before·writing·to·audit·logs</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-auditd_log_format_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-service_oddjobd_disabled_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 23 | ······<ocil:title>Disable·Odd·Job·Daemon·(oddjobd)</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-service_oddjobd_disabled_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_unauthorized_sgid_ocil:questionnaire:1"> | ||
| 35 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_dir_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Account·Lockouts·Must·Persist</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_dir_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pubkey_auth_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Enable·Public·Key·Authentication</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pubkey_auth_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_passwd_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_filter_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable·use·of·Berkeley·Packet·Filter·with·seccomp</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_filter_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Verify·All·Account·Password·Hashes·are·Shadowed</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_all_shadowed_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-configure_kerberos_crypto_policy_ocil:questionnaire:1"> | ||
| 59 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-package_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-package_syslogng_installed_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·syslog-ng·is·Installed</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-package_ | 61 | ········<ocil:test_action_ref>ocil:ssg-package_syslogng_installed_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-s | 64 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_requiretty_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·requiretty</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-s | 67 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_requiretty_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-restrict_serial_port_logins_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Restrict·Serial·Port·Root·Logins</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-restrict_serial_port_logins_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-selinux_state_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure· | 77 | ······<ocil:title>Ensure·SELinux·State·is·Enforcing</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-selinux_state_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_open_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Record·Unsuccessful·Access·Attempts·to·Files·-·open</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_unsuccessful_file_modification_open_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-a | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_gssapi_auth_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Disable·GSSAPI·Authentication</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-a | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_gssapi_auth_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_var_log_audit_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-enable_dconf_user_profile_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Configure·GNOME3·DConf·User·Profile</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-enable_dconf_user_profile_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-disallow_bypass_password_sudo_ocil:questionnaire:1"> | ||
| 107 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_removed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Remove·the·OpenSSH·Server·Package</ocil:title> | ||
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_removed_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-configure_openssl_crypto_policy_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Configure·OpenSSL·library·to·use·System·Crypto·Policy</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-configure_openssl_crypto_policy_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet_removed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Remove·telnet·Clients</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-package_telnet_removed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| Max diff block lines reached; 858734/870527 bytes (98.65%) of diff not shown. | |||
| Offset 71, 217 lines modified | Offset 71, 217 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="wifi-iface"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="not_bootc"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 99 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_ | 104 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_audit"> | 109 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_au | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 119 | ········</cpe-lang:logical-test> | ||
| 120 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 121 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 122 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 125 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 136 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_ | 143 | ····<cpe-lang:platform·id="package_systemd"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 120 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 122 | ····<cpe-lang:platform·id="package_ | 148 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 125 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id=" | 154 | ····<cpe-lang:platform·id="package_iptables"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 130 | ········ | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 131 | ········</cpe-lang:logical-test> | ||
| 132 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 134 | ········</cpe-lang:logical-test> | ||
| 135 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id=" | 159 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ········ | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 141 | ········</cpe-lang:logical-test> | ||
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 144 | ········</cpe-lang:logical-test> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_yum"> | 164 | ····<cpe-lang:platform·id="package_yum"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id=" | 169 | ····<cpe-lang:platform·id="package_bind"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 172 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 173 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 174 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 178 | ········</cpe-lang:logical-test> | ||
| 179 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 180 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 181 | ········</cpe-lang:logical-test> | ||
| 161 | ······</cpe-lang:logical-test> | 182 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 183 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 184 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| Max diff block lines reached; 631069/644081 bytes (97.98%) of diff not shown. | |||
| Offset 3, 6235 lines modified | Offset 3, 6235 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_exec_shield_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Enable·ExecShield·via·sysctl</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-ss | 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_exec_shield_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chsh_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_motd_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Verify·Group·Ownership·of·Message·of·the·Day·Banner</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-grub2_password_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Set· | 23 | ······<ocil:title>Set·Boot·Loader·Password·in·grub2</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-grub2_password_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_rp_filter_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify·that·All·World-Writable·Directories·Have·Sticky·Bits·Set</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_sticky_bits_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_daily_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Verify·Group·Who·Owns·cron.daily</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_daily_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_var_log_noexec_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Add·noexec·Option·to·/var/log</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-mount_option_var_log_noexec_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_unsuccessful_file_modification_truncate_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_issue_net_cis_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·Remote·Login·Warning·Banner·Is·Configured·Properly</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_issue_net_cis_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_mode_blank_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_lchown_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·lchown</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_lchown_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_group_ownership_var_log_audit_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>System·Audit·Logs·Must·Be·Group·Owned·By·Root</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_group_ownership_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_at_allow_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Group·Who·Owns·/etc/at.allow·file</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner | 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Verify·Group·Ownership·on·SSH·Server·Public·*.pub·Key·Files</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupownership_sshd_pub_key_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-s | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·SSH·Support·for·.rhosts·Files</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-s | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_rhosts_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_log_martians_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enable·Kernel·Paremeter·to·Log·Martian·Packets·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_log_martians_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_cramfs_disabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Disable·Mounting·of·cramfs</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_cramfs_disabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_grub2_cfg_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·Group·Ownership</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_d_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Verify·Permissions·on·cron.d</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_cron_d_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_bashrc_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure· | 107 | ······<ocil:title>Ensure·the·Default·Bash·Umask·is·Set·Correctly</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_bashrc_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_remote_access_credential_prompt_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-rpm_verify_ownership_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Verify·and·Correct·Ownership·with·RPM</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-rpm_verify_ownership_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_suid_auid_privilege_function_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-service_autofs_disabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Disable·the·Automounter</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 1009644/1022148 bytes (98.78%) of diff not shown. | |||
| Offset 3, 3613 lines modified | Offset 3, 3613 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_iptables_installed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Install·iptables·Package</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-package_iptables_installed_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_shadow_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·User·Who·Owns·shadow·File</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Configure·System·to·Forward·All·Mail·through·a·specific·host</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_relayhost_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_finit_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·auditd·Collects·Information·on·Kernel·Module·Loading·and·Unloading·-·finit_module</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_ | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_kernel_module_loading_finit_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_home_directories_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>A | 35 | ······<ocil:title>All·Interactive·User·Home·Directories·Must·Be·Owned·By·The·Primary·User</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-file_ | 37 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_home_directories_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_postmaster_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_ra_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Configure·Accepting·Router·Advertisements·on·All·IPv6·Interfaces</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_ra_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_d_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Owner·on·cron.d</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_d_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Record· | 53 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·fchmodat</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_fchmodat_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-service_rdisc_disabled_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-se | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 71 | ······<ocil:title>Disable·IPv6·Addressing·on·All·IPv6·Interfaces</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-se | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sudo_remove_no_authenticate_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_binfmt_misc_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Disable·kernel·support·for·MISC·binaries</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_binfmt_misc_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>En | 83 | ······<ocil:title>Enable·PAM</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-s | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_crond_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Enable·cron·Service</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-s | 91 | ········<ocil:test_action_ref>ocil:ssg-service_crond_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_max_life_existing_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_rds_disabled_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·RDS·Support</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_rds_disabled_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_crontab_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Verify·Permissions·on·crontab</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_crontab_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-no_netrc_files_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·No·netrc·Files·Exist</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-no_netrc_files_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_memory_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Randomize·the·kernel·memory·sections</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_randomize_memory_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-prefer_64bit_os_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Prefer·to·use·a·64-bit·Operating·System·when·supported</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-prefer_64bit_os_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_shadow_ocil:questionnaire:1"> |
| Max diff block lines reached; 996327/1009193 bytes (98.73%) of diff not shown. | |||
| Offset 71, 242 lines modified | Offset 71, 242 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="wifi-iface"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="system_with_kernel"> | 83 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="not_bootc"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_ | 103 | ····<cpe-lang:platform·id="package_postfix"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_pam"> | 108 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator=" | 115 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 120 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="package_ | 125 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 124 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_b | 131 | ····<cpe-lang:platform·id="package_bash"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_b | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="not_ | 136 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 135 | ········</cpe-lang:logical-test> | 140 | ········</cpe-lang:logical-test> |
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | 143 | ········</cpe-lang:logical-test> |
| 139 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 145 | ········</cpe-lang:logical-test> | ||
| 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ········ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 148 | ········</cpe-lang:logical-test> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 151 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="aarc | 157 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_ | 164 | ····<cpe-lang:platform·id="package_systemd"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="ue | 169 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_ | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id=" | 175 | ····<cpe-lang:platform·id="package_iptables"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 180 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-i | 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 183 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 184 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id="package_ | 185 | ····<cpe-lang:platform·id="package_yum"> |
| 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 187 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| Max diff block lines reached; 757156/772550 bytes (98.01%) of diff not shown. | |||
| Offset 3, 4013 lines modified | Offset 3, 4013 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_firewalld_installed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Install·firewalld·Package</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-package_firewalld_installed_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_rhosts_rsa_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_last_change_is_in_past_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·all·users·last·password·change·date·is·in·the·past</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-ss | 19 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_last_change_is_in_past_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-configure_libreswan_crypto_policy_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nosuid_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Add·nosuid·Option·to·/dev/shm</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nosuid_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_memory_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Randomize·the·kernel·memory·sections</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_randomize_memory_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_uvcvideo_disabled_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-grub2_systemd_debug-shell_argument_absent_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Ensure·debug-shell·service·is·not·enabled·during·boot</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-grub2_systemd_debug-shell_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-require_emergency_target_auth_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Configure·Kernel·Parameter·for·Accepting·Secure·Redirects·By·Default</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_secure_redirects_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_sticky_bits_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify· | 53 | ······<ocil:title>Verify·that·All·World-Writable·Directories·Have·Sticky·Bits·Set</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_sticky_bits_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_private_key_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_source_route_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_at_deny_not_exist_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·that·/etc/at.deny·does·not·exist</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_at_deny_not_exist_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable·IPv6·Addressing·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_disable_ipv6_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·all·IPv6·Interfaces</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-sysctl_ | 79 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_all_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_messages_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Verify·Group·Who·Owns·/var/log/messages·File</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_messages_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spectre_v2_argument_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Enforce·Spectre·v2·mitigation</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-grub2_spectre_v2_argument_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_iptables_installed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Install·iptables·Package</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_iptables_installed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_cron_daily_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-no_shelllogin_for_systemaccounts_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure·that·System·Accounts·Do·Not·Run·a·Shell·Upon·Login</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-no_shelllogin_for_systemaccounts_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_at_allow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 107 | ······<ocil:title>Verify·Group·Who·Owns·/etc/at.allow·file</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_at_allow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_motd_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·ownership·of·Message·of·the·Day·Banner</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 994206/1006806 bytes (98.75%) of diff not shown. | |||
| Offset 71, 242 lines modified | Offset 71, 242 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="wifi-iface"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="system_with_kernel"> | 83 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="not_bootc"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_ | 103 | ····<cpe-lang:platform·id="package_postfix"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_pam"> | 108 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator=" | 115 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 120 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="package_ | 125 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 124 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_b | 131 | ····<cpe-lang:platform·id="package_bash"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_b | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="not_ | 136 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 135 | ········</cpe-lang:logical-test> | 140 | ········</cpe-lang:logical-test> |
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | 143 | ········</cpe-lang:logical-test> |
| 139 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 145 | ········</cpe-lang:logical-test> | ||
| 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ········ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 148 | ········</cpe-lang:logical-test> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 150 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 151 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="aarc | 157 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_ | 164 | ····<cpe-lang:platform·id="package_systemd"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="ue | 169 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_ | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id=" | 175 | ····<cpe-lang:platform·id="package_iptables"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 178 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 179 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id=" | 180 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-i | 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 180 | ······</cpe-lang:logical-test> | 183 | ······</cpe-lang:logical-test> |
| 181 | ····</cpe-lang:platform> | 184 | ····</cpe-lang:platform> |
| 182 | ····<cpe-lang:platform·id="package_ | 185 | ····<cpe-lang:platform·id="package_yum"> |
| 183 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 186 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 187 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| Max diff block lines reached; 756632/771971 bytes (98.01%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-kylinserver10-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-kylinserver10-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP1</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP1</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP2</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP2</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP3</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Kylin·V10·SP3</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml">oval:ssg-installed_OS_is_kylinserver10:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-kylinserver10-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_KYLINSERVER10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_KYLINSERVER10"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Kylin·Server·10</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Kylin·Server·10</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Kylin·Server·10.·It·is·a·rendering·of | 48 | configuration·settings·for·Kylin·Server·10.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 112, 94 lines modified | Offset 112, 94 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="package_ | 119 | ········<cpe-lang:platform·id="package_dnf"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 122 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 123 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 124 | ········<cpe-lang:platform·id=" | 124 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 127 | ··········</cpe-lang:logical-test> | 127 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 128 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id="package_f | 129 | ········<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 132 | ··········</cpe-lang:logical-test> | 133 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 134 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id="package_ | 135 | ········<cpe-lang:platform·id="package_bash"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 137 | ··········</cpe-lang:logical-test> | 138 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 139 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id=" | 140 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 144 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 145 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id=" | 146 | ········<cpe-lang:platform·id="uefi"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 147 | ··········</cpe-lang:logical-test> | 149 | ··········</cpe-lang:logical-test> |
| 148 | ········</cpe-lang:platform> | 150 | ········</cpe-lang:platform> |
| 149 | ········<cpe-lang:platform·id=" | 151 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 150 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 152 | ··········</cpe-lang:logical-test> | 154 | ··········</cpe-lang:logical-test> |
| 153 | ········</cpe-lang:platform> | 155 | ········</cpe-lang:platform> |
| 154 | ········<cpe-lang:platform·id="machine"> | 156 | ········<cpe-lang:platform·id="machine"> |
| 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 158 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 157 | ··········</cpe-lang:logical-test> | 159 | ··········</cpe-lang:logical-test> |
| 158 | ········</cpe-lang:platform> | 160 | ········</cpe-lang:platform> |
| 159 | ········<cpe-lang:platform·id="package_gdm"> | 161 | ········<cpe-lang:platform·id="package_gdm"> |
| 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 163 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 162 | ··········</cpe-lang:logical-test> | 164 | ··········</cpe-lang:logical-test> |
| 163 | ········</cpe-lang:platform> | 165 | ········</cpe-lang:platform> |
| 164 | ········<cpe-lang:platform·id=" | 166 | ········<cpe-lang:platform·id="package_pam"> |
| 165 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 167 | ··········</cpe-lang:logical-test> | 169 | ··········</cpe-lang:logical-test> |
| 168 | ········</cpe-lang:platform> | 170 | ········</cpe-lang:platform> |
| 169 | ········<cpe-lang:platform·id=" | 171 | ········<cpe-lang:platform·id="non-uefi"> |
| 170 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 172 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 172 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_ | 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 173 | ··········</cpe-lang:logical-test> | 174 | ··········</cpe-lang:logical-test> |
| 174 | ········</cpe-lang:platform> | 175 | ········</cpe-lang:platform> |
| 175 | ········<cpe-lang:platform·id="package_au | 176 | ········<cpe-lang:platform·id="package_audit"> |
| 176 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 177 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_au | 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 179 | ··········</cpe-lang:logical-test> | 179 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 180 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id=" | 181 | ········<cpe-lang:platform·id="system_with_kernel"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 184 | ··········</cpe-lang:logical-test> | 184 | ··········</cpe-lang:logical-test> |
| 185 | ········</cpe-lang:platform> | 185 | ········</cpe-lang:platform> |
| 186 | ········<cpe-lang:platform·id="package_ | 186 | ········<cpe-lang:platform·id="package_firewalld"> |
| 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 187 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 188 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 189 | ··········</cpe-lang:logical-test> | 189 | ··········</cpe-lang:logical-test> |
| 190 | ········</cpe-lang:platform> | 190 | ········</cpe-lang:platform> |
| 191 | ········<cpe-lang:platform·id="package_chrony"> | 191 | ········<cpe-lang:platform·id="package_chrony"> |
| 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 192 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 193 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 194 | ··········</cpe-lang:logical-test> | 194 | ··········</cpe-lang:logical-test> |
| 195 | ········</cpe-lang:platform> | 195 | ········</cpe-lang:platform> |
| 196 | ········<cpe-lang:platform·id="package_ | 196 | ········<cpe-lang:platform·id="package_sudo"> |
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 199 | ··········</cpe-lang:logical-test> | 199 | ··········</cpe-lang:logical-test> |
| 200 | ········</cpe-lang:platform> | 200 | ········</cpe-lang:platform> |
| 201 | ······</cpe-lang:platform-specification> | 201 | ······</cpe-lang:platform-specification> |
| 202 | ······<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> | 202 | ······<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> |
| 203 | ······<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> | 203 | ······<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> |
| 204 | ······<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> | 204 | ······<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> |
| Max diff block lines reached; 499163/512619 bytes (97.38%) of diff not shown. | |||
| Offset 3, 789 lines modified | Offset 3, 789 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-ss | 10 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_dcredit_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Digit·Characters</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-ss | 13 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_dcredit_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_ntp_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Install·the·ntp·service</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-package_ntp_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-sudo | 22 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_no_root_target_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Don't·target·root·user·in·the·sudoers·file</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-sudo | 25 | ········<ocil:test_action_ref>ocil:ssg-sudoers_no_root_target_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_send_redirects_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-dconf_gnome_screensaver_idle_delay_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Set·GNOME3·Screensaver·Inactivity·Timeout</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-dconf_gnome_screensaver_idle_delay_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_shadow_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Verify·Group·Who·Owns·shadow·File</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Limit·the·Number·of·Concurrent·Login·Sessions·Allowed·Per·User</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_max_concurrent_login_sessions_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-package_telnet-server_removed_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Uninstall·telnet-server·Package</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-package_telnet-server_removed_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_ocredit_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Special·Characters</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_password | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_ocredit_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> |
| 65 | ······<ocil:title> | 65 | ······<ocil:title>Verify·Group·Who·Owns·passwd·File</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-banner_etc_motd_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Modify·the·System·Message·of·the·Day·Banner</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-banner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-grub2_password_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Set·Boot·Loader·Password·in·grub2</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-grub2_password_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_cron_logging_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Ensure·cron·Is·Logging·To·Rsyslog</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_cron_logging_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-sudo_custom_logfile_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·Sudo·Logfile·Exists·-·sudo·logfile</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sudo_custom_logfile_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_group_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Group·Who·Owns·group·File</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_login_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> | 101 | ······<ocil:title>Disable·SSH·Root·Login</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_login_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_maximum_age_login_defs_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>The·operating·system·must·restrict·privilege·elevation·to·authorized·personnel</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sudo_restrict_privilege_elevation_to_authorized_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_minclass_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Minimum·Different·Categories</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_minclass_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-package_psacct_installed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Install·the·psacct·package</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-package_psacct_installed_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg- | 124 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 125 | ······<ocil:title>Prevent·Login·to·Accounts·With·Empty·Password</ocil:title> |
| 126 | ······<ocil:actions> | 126 | ······<ocil:actions> |
| Max diff block lines reached; 222633/235006 bytes (94.74%) of diff not shown. | |||
| Offset 71, 94 lines modified | Offset 71, 94 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_dnf"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_f | 88 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_ | 94 | ····<cpe-lang:platform·id="package_bash"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="uefi"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="machine"> | 115 | ····<cpe-lang:platform·id="machine"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id="package_gdm"> | 120 | ····<cpe-lang:platform·id="package_gdm"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id=" | 125 | ····<cpe-lang:platform·id="package_pam"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 126 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="non-uefi"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_ | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_au | 135 | ····<cpe-lang:platform·id="package_audit"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_au | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 138 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id=" | 140 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg- | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="package_ | 145 | ····<cpe-lang:platform·id="package_firewalld"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id="package_chrony"> | 150 | ····<cpe-lang:platform·id="package_chrony"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id="package_ | 155 | ····<cpe-lang:platform·id="package_sudo"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_ | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-kylinserver10-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 160 | ··</cpe-lang:platform-specification> | 160 | ··</cpe-lang:platform-specification> |
| 161 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> | 161 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP1:ga:server"/> |
| 162 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> | 162 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP2:ga:server"/> |
| 163 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> | 163 | ··<xccdf-1.2:platform·idref="cpe:/o:Kylin:Kylin:V10_SP3:ga:server"/> |
| 164 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> | 164 | ··<xccdf-1.2:version·update="https://github.com/ComplianceAsCode/content/releases/latest">0.1.76</xccdf-1.2:version> |
| Offset 802, 14 lines modified | Offset 802, 24 lines modified | ||
| 802 | ··············<xccdf-1.2:reference·href="https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf">PR.IP-3</xccdf-1.2:reference> | 802 | ··············<xccdf-1.2:reference·href="https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf">PR.IP-3</xccdf-1.2:reference> |
| 803 | ··············<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-11.5</xccdf-1.2:reference> | 803 | ··············<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-11.5</xccdf-1.2:reference> |
| 804 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000445-GPOS-00199</xccdf-1.2:reference> | 804 | ··············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000445-GPOS-00199</xccdf-1.2:reference> |
| 805 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R76</xccdf-1.2:reference> | 805 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R76</xccdf-1.2:reference> |
| 806 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R79</xccdf-1.2:reference> | 806 | ··············<xccdf-1.2:reference·href="https://cyber.gouv.fr/sites/default/files/document/linux_configuration-en-v2.pdf">R79</xccdf-1.2:reference> |
| 807 | ··············<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">11.5.2</xccdf-1.2:reference> | 807 | ··············<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">11.5.2</xccdf-1.2:reference> |
| 808 | ··············<xccdf-1.2:rationale>The·AIDE·package·must·be·installed·if·it·is·to·be·available·for·integrity·checking.</xccdf-1.2:rationale> | 808 | ··············<xccdf-1.2:rationale>The·AIDE·package·must·be·installed·if·it·is·to·be·available·for·integrity·checking.</xccdf-1.2:rationale> |
| 809 | ··············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_aide_installed">[[packages]] | ||
| 810 | name·=·"aide" | ||
| 811 | version·=·"*"</xccdf-1.2:fix> | ||
| 812 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_aide | ||
| 813 | class·install_aide·{ | ||
| 814 | ··package·{·'aide': | ||
| 815 | ····ensure·=>·'installed', | ||
| 816 | ··} | ||
| 817 | }</xccdf-1.2:fix> | ||
| 809 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Gather·the·package·facts | 818 | ··············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_aide_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Gather·the·package·facts |
| 810 | ··package_facts: | 819 | ··package_facts: |
| 811 | ····manager:·auto | 820 | ····manager:·auto |
| 812 | ··tags: | 821 | ··tags: |
| 813 | ··-·CJIS-5.10.1.3 | 822 | ··-·CJIS-5.10.1.3 |
| 814 | ··-·NIST-800-53-CM-6(a) | 823 | ··-·NIST-800-53-CM-6(a) |
| 815 | ··-·PCI-DSS-Req-11.5 | 824 | ··-·PCI-DSS-Req-11.5 |
| Offset 833, 24 lines modified | Offset 843, 14 lines modified | ||
| 833 | ··-·PCI-DSSv4-11.5.2 | 843 | ··-·PCI-DSSv4-11.5.2 |
| 834 | ··-·enable_strategy | 844 | ··-·enable_strategy |
| 835 | ··-·low_complexity | 845 | ··-·low_complexity |
| 836 | ··-·low_disruption | 846 | ··-·low_disruption |
| 837 | ··-·medium_severity | 847 | ··-·medium_severity |
| Max diff block lines reached; 244493/256734 bytes (95.23%) of diff not shown. | |||
| Offset 19, 23 lines modified | Offset 19, 23 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2025-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 36 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 563, 15 lines modified | Offset 563, 15 lines modified | ||
| 563 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 563 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 564 | ············</xccdf-1.2:check> | 564 | ············</xccdf-1.2:check> |
| 565 | ··········</xccdf-1.2:Rule> | 565 | ··········</xccdf-1.2:Rule> |
| 566 | ········</xccdf-1.2:Group> | 566 | ········</xccdf-1.2:Group> |
| 567 | ······</xccdf-1.2:Group> | 567 | ······</xccdf-1.2:Group> |
| 568 | ····</xccdf-1.2:Benchmark> | 568 | ····</xccdf-1.2:Benchmark> |
| 569 | ··</ds:component> | 569 | ··</ds:component> |
| 570 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2025-0 | 570 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 571 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 571 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 572 | ······<oval-def:generator> | 572 | ······<oval-def:generator> |
| 573 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 573 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 574 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> | 574 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> |
| 575 | ········<oval:schema_version>5.11</oval:schema_version> | 575 | ········<oval:schema_version>5.11</oval:schema_version> |
| 576 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 576 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 577 | ······</oval-def:generator> | 577 | ······</oval-def:generator> |
| Offset 600, 74 lines modified | Offset 600, 74 lines modified | ||
| 600 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 600 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 601 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 601 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 602 | ··········<ind:instance·datatype="int">1</ind:instance> | 602 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 603 | ········</ind:textfilecontent54_object> | 603 | ········</ind:textfilecontent54_object> |
| 604 | ······</oval-def:objects> | 604 | ······</oval-def:objects> |
| 605 | ····</oval-def:oval_definitions> | 605 | ····</oval-def:oval_definitions> |
| 606 | ··</ds:component> | 606 | ··</ds:component> |
| 607 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2025-0 | 607 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2025-03-01T22:08:00"> |
| 608 | ····<ocil:ocil> | 608 | ····<ocil:ocil> |
| 609 | ······<ocil:generator> | 609 | ······<ocil:generator> |
| 610 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 610 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 611 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 611 | ········<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 612 | ········<ocil:schema_version>2.0</ocil:schema_version> | 612 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 613 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 613 | ········<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 614 | ······</ocil:generator> | 614 | ······</ocil:generator> |
| 615 | ······<ocil:questionnaires> | 615 | ······<ocil:questionnaires> |
| 616 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 617 | ··········<ocil:title>Enable·audit·Service</ocil:title> | ||
| 618 | ··········<ocil:actions> | ||
| 619 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 620 | ··········</ocil:actions> | ||
| 621 | ········</ocil:questionnaire> | ||
| 622 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | 616 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> |
| 623 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | 617 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> |
| 624 | ··········<ocil:actions> | 618 | ··········<ocil:actions> |
| 625 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | 619 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> |
| 626 | ··········</ocil:actions> | 620 | ··········</ocil:actions> |
| 627 | ········</ocil:questionnaire> | 621 | ········</ocil:questionnaire> |
| 622 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 623 | ··········<ocil:title>Enable·audit·Service</ocil:title> | ||
| 624 | ··········<ocil:actions> | ||
| 625 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 626 | ··········</ocil:actions> | ||
| 627 | ········</ocil:questionnaire> | ||
| 628 | ······</ocil:questionnaires> | 628 | ······</ocil:questionnaires> |
| 629 | ······<ocil:test_actions> | 629 | ······<ocil:test_actions> |
| 630 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 630 | ········<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 631 | ··········<ocil:when_true> | 631 | ··········<ocil:when_true> |
| 632 | ············<ocil:result>PASS</ocil:result> | 632 | ············<ocil:result>PASS</ocil:result> |
| 633 | ··········</ocil:when_true> | 633 | ··········</ocil:when_true> |
| 634 | ··········<ocil:when_false> | 634 | ··········<ocil:when_false> |
| 635 | ············<ocil:result>FAIL</ocil:result> | 635 | ············<ocil:result>FAIL</ocil:result> |
| 636 | ··········</ocil:when_false> | 636 | ··········</ocil:when_false> |
| 637 | ········</ocil:boolean_question_test_action> | 637 | ········</ocil:boolean_question_test_action> |
| 638 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 638 | ········<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 639 | ··········<ocil:when_true> | 639 | ··········<ocil:when_true> |
| 640 | ············<ocil:result>PASS</ocil:result> | 640 | ············<ocil:result>PASS</ocil:result> |
| 641 | ··········</ocil:when_true> | 641 | ··········</ocil:when_true> |
| 642 | ··········<ocil:when_false> | 642 | ··········<ocil:when_false> |
| 643 | ············<ocil:result>FAIL</ocil:result> | 643 | ············<ocil:result>FAIL</ocil:result> |
| 644 | ··········</ocil:when_false> | 644 | ··········</ocil:when_false> |
| 645 | ········</ocil:boolean_question_test_action> | 645 | ········</ocil:boolean_question_test_action> |
| 646 | ······</ocil:test_actions> | 646 | ······</ocil:test_actions> |
| 647 | ······<ocil:questions> | 647 | ······<ocil:questions> |
| 648 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 649 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 650 | following·command: | ||
| 651 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 652 | The·output·should·contain·ahlt | ||
| 653 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 654 | ········</ocil:boolean_question> | ||
| 648 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 655 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 649 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 656 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 650 | following·command: | 657 | following·command: |
| 651 | $·sudo·launchctl·list·com.apple.auditd | 658 | $·sudo·launchctl·list·com.apple.auditd |
| 652 | The·output·should·return·process·information·for | 659 | The·output·should·return·process·information·for |
| 653 | com.apple.auditd | 660 | com.apple.auditd |
| 654 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 661 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 655 | ········</ocil:boolean_question> | 662 | ········</ocil:boolean_question> |
| 656 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 657 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 658 | following·command: | ||
| 659 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 660 | The·output·should·contain·ahlt | ||
| 661 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 662 | ········</ocil:boolean_question> | ||
| 663 | ······</ocil:questions> | 663 | ······</ocil:questions> |
| 664 | ····</ocil:ocil> | 664 | ····</ocil:ocil> |
| 665 | ··</ds:component> | 665 | ··</ds:component> |
| 666 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2025-0 | 666 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2025-03-01T22:08:00"> |
| 667 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 667 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 668 | ······<oval-def:generator> | 668 | ······<oval-def:generator> |
| 669 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 669 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 670 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> | 670 | ········<oval:product_version>ssg:·[0,·1,·76],·python:·3.13.2</oval:product_version> |
| 671 | ········<oval:schema_version>5.11</oval:schema_version> | 671 | ········<oval:schema_version>5.11</oval:schema_version> |
| 672 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> | 672 | ········<oval:timestamp>2025-03-01T08:08:00</oval:timestamp> |
| 673 | ······</oval-def:generator> | 673 | ······</oval-def:generator> |
| Max diff block lines reached; -1/9126 bytes (-0.01%) of diff not shown. | |||
| Offset 3, 56 lines modified | Offset 3, 56 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Enable·audit·Service</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | 11 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Enable·audit·Service</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ··</ocil:questionnaires> | 22 | ··</ocil:questionnaires> |
| 23 | ··<ocil:test_actions> | 23 | ··<ocil:test_actions> |
| 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 25 | ······<ocil:when_true> | 25 | ······<ocil:when_true> |
| 26 | ········<ocil:result>PASS</ocil:result> | 26 | ········<ocil:result>PASS</ocil:result> |
| 27 | ······</ocil:when_true> | 27 | ······</ocil:when_true> |
| 28 | ······<ocil:when_false> | 28 | ······<ocil:when_false> |
| 29 | ········<ocil:result>FAIL</ocil:result> | 29 | ········<ocil:result>FAIL</ocil:result> |
| 30 | ······</ocil:when_false> | 30 | ······</ocil:when_false> |
| 31 | ····</ocil:boolean_question_test_action> | 31 | ····</ocil:boolean_question_test_action> |
| 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 33 | ······<ocil:when_true> | 33 | ······<ocil:when_true> |
| 34 | ········<ocil:result>PASS</ocil:result> | 34 | ········<ocil:result>PASS</ocil:result> |
| 35 | ······</ocil:when_true> | 35 | ······</ocil:when_true> |
| 36 | ······<ocil:when_false> | 36 | ······<ocil:when_false> |
| 37 | ········<ocil:result>FAIL</ocil:result> | 37 | ········<ocil:result>FAIL</ocil:result> |
| 38 | ······</ocil:when_false> | 38 | ······</ocil:when_false> |
| 39 | ····</ocil:boolean_question_test_action> | 39 | ····</ocil:boolean_question_test_action> |
| 40 | ··</ocil:test_actions> | 40 | ··</ocil:test_actions> |
| 41 | ··<ocil:questions> | 41 | ··<ocil:questions> |
| 42 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 44 | following·command: | ||
| 45 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 46 | The·output·should·contain·ahlt | ||
| 47 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 48 | ····</ocil:boolean_question> | ||
| 42 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 49 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 50 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 44 | following·command: | 51 | following·command: |
| 45 | $·sudo·launchctl·list·com.apple.auditd | 52 | $·sudo·launchctl·list·com.apple.auditd |
| 46 | The·output·should·return·process·information·for | 53 | The·output·should·return·process·information·for |
| 47 | com.apple.auditd | 54 | com.apple.auditd |
| 48 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 55 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 49 | ····</ocil:boolean_question> | 56 | ····</ocil:boolean_question> |
| 50 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 51 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 52 | following·command: | ||
| 53 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 54 | The·output·should·contain·ahlt | ||
| 55 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 56 | ····</ocil:boolean_question> | ||
| 57 | ··</ocil:questions> | 57 | ··</ocil:questions> |
| 58 | </ocil:ocil> | 58 | </ocil:ocil> |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-ocp4-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-ocp4-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:redhat:openshift_container_platform:4.10"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4.10</cpe-dict:title> |
| Offset 111, 15 lines modified | Offset 111, 15 lines modified | ||
| 111 | ······</cpe-dict:cpe-item> | 111 | ······</cpe-dict:cpe-item> |
| 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> | 112 | ······<cpe-dict:cpe-item·name="cpe:/o:redhat:openshift_container_platform_node:4"> |
| 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> | 113 | ········<cpe-dict:title·xml:lang="en-us">Red·Hat·OpenShift·Container·Platform·4·Node</cpe-dict:title> |
| 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> | 114 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml">oval:ssg-installed_app_is_ocp4_node:def:1</cpe-dict:check> |
| 115 | ······</cpe-dict:cpe-item> | 115 | ······</cpe-dict:cpe-item> |
| 116 | ····</cpe-dict:cpe-list> | 116 | ····</cpe-dict:cpe-list> |
| 117 | ··</ds:component> | 117 | ··</ds:component> |
| 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2025-0 | 118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-ocp4-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 119 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 120 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 120 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 121 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 122 | ······<xccdf-1.2:description> | 122 | ······<xccdf-1.2:description> |
| 123 | ········This·guide·presents·a·catalog·of·security-relevant | 123 | ········This·guide·presents·a·catalog·of·security-relevant |
| 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 124 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 125 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 189, 197 lines modified | Offset 189, 197 lines modified | ||
| 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 189 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 190 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 191 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 192 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 193 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 194 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 195 | ······<cpe-lang:platform-specification> | 195 | ······<cpe-lang:platform-specification> |
| 196 | ········<cpe-lang:platform·id="ocp4-on-sdn"> | ||
| 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> | ||
| 199 | ··········</cpe-lang:logical-test> | ||
| 200 | ········</cpe-lang:platform> | ||
| 201 | ········<cpe-lang:platform·id="ocp4-node | 196 | ········<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 202 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 197 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 203 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node | 198 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 199 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 204 | ··········</cpe-lang:logical-test> | 200 | ··········</cpe-lang:logical-test> |
| 205 | ········</cpe-lang:platform> | 201 | ········</cpe-lang:platform> |
| 206 | ········<cpe-lang:platform·id="not_ | 202 | ········<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> |
| 207 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 203 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 208 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 209 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 210 | ············</cpe-lang:logical-test> | ||
| 211 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 212 | ············ | 204 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 213 | ············ | 205 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 214 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 215 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 216 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 217 | ············</cpe-lang:logical-test> | ||
| 218 | ··········</cpe-lang:logical-test> | 206 | ··········</cpe-lang:logical-test> |
| 219 | ········</cpe-lang:platform> | 207 | ········</cpe-lang:platform> |
| 220 | ········<cpe-lang:platform·id=" | 208 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> |
| 221 | ··········<cpe-lang:logical-test·operator=" | 209 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 222 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 223 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 224 | ············</cpe-lang:logical-test> | ||
| 225 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 210 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 211 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 226 | ··········</cpe-lang:logical-test> | 212 | ··········</cpe-lang:logical-test> |
| 227 | ········</cpe-lang:platform> | 213 | ········</cpe-lang:platform> |
| 228 | ········<cpe-lang:platform·id=" | 214 | ········<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 229 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 215 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 230 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_o | 216 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 231 | ··········</cpe-lang:logical-test> | 217 | ··········</cpe-lang:logical-test> |
| 232 | ········</cpe-lang:platform> | 218 | ········</cpe-lang:platform> |
| 233 | ········<cpe-lang:platform·id="ocp4- | 219 | ········<cpe-lang:platform·id="ocp4-on-azure"> |
| 234 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 220 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 235 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-n | 221 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 236 | ··········</cpe-lang:logical-test> | 222 | ··········</cpe-lang:logical-test> |
| 237 | ········</cpe-lang:platform> | 223 | ········</cpe-lang:platform> |
| 238 | ········<cpe-lang:platform·id=" | 224 | ········<cpe-lang:platform·id="ocp4-node-on-ovn"> |
| 239 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 225 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 240 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 241 | ············ | 226 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> |
| 242 | ············</cpe-lang:logical-test> | ||
| 243 | ············<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 244 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 245 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 246 | ············</cpe-lang:logical-test> | ||
| 247 | ··········</cpe-lang:logical-test> | 227 | ··········</cpe-lang:logical-test> |
| 248 | ········</cpe-lang:platform> | 228 | ········</cpe-lang:platform> |
| 249 | ········<cpe-lang:platform·id="ocp4-no | 229 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> |
| 250 | ··········<cpe-lang:logical-test·operator="AND"·negate=" | 230 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 251 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_no | 231 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 252 | ··········</cpe-lang:logical-test> | 232 | ··········</cpe-lang:logical-test> |
| 253 | ········</cpe-lang:platform> | 233 | ········</cpe-lang:platform> |
| 254 | ········<cpe-lang:platform·id="ocp4-on-gcp"> | 234 | ········<cpe-lang:platform·id="ocp4-on-gcp"> |
| 255 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 235 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 256 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> | 236 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 257 | ··········</cpe-lang:logical-test> | 237 | ··········</cpe-lang:logical-test> |
| 258 | ········</cpe-lang:platform> | 238 | ········</cpe-lang:platform> |
| 259 | ········<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> | ||
| 260 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 261 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 262 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 263 | ··········</cpe-lang:logical-test> | ||
| 264 | ········</cpe-lang:platform> | ||
| 265 | ········<cpe-lang:platform·id="ocp4.16"> | ||
| 266 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 267 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | ||
| 268 | ··········</cpe-lang:logical-test> | ||
| 269 | ········</cpe-lang:platform> | ||
| 270 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | 239 | ········<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 271 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | 240 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 272 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 241 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 273 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 242 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 274 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 243 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 275 | ··········</cpe-lang:logical-test> | 244 | ··········</cpe-lang:logical-test> |
| 276 | ········</cpe-lang:platform> | 245 | ········</cpe-lang:platform> |
| 277 | ········<cpe-lang:platform·id="ocp4-on-hypershift"> | 246 | ········<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 278 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 279 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 280 | ··········</cpe-lang:logical-test> | ||
| 281 | ········</cpe-lang:platform> | ||
| Max diff block lines reached; 913457/926938 bytes (98.55%) of diff not shown. | |||
| Offset 3, 5854 lines modified | Offset 3, 5963 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-scc_limit_container_allowed_capabilities_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Limit·Container·Capabilities</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-scc_limit_container_allowed_capabilities_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ip_allocations_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Permissions·on·the·OpenShift·SDN·Container·Network·Interface·Plugin·IP·Address·Allocations</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_ip_allocations_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_eviction_thresholds_set_soft_memory_available_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-api_server_kubelet_client_cert_pre_4_9_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Configure·the·kubelet·Certificate·File·for·the·API·Server</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-api_server_kubelet_client_cert_pre_4_9_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ovs_conf_db_lock_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_oauth_audit_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>The·OAuth·Audit·Logs·Directory·Must·Have·Mode·0700</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_oauth_audit_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-controller_service_account_ca_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Configure·the·Service·Account·Certificate·Authority·Key·for·the·Controller·Manager</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-controller_service_account_ca_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_kubeconfig_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·User·Who·Owns·The·OpenShift·Admin·Kubeconfig·File</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-api_server_api_priority_v1_flowschema_catch_all_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etcd_data_dir_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Verify·Group·Who·Owns·The·Etcd·Database·Directory</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etcd_data_dir_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-e | 52 | ····<ocil:questionnaire·id="ocil:ssg-kube_descheduler_lifecycle_policy_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure· | 53 | ······<ocil:title>Ensure·that·the·LifecycleAndUtilization·Profile·for·the·Kube·Descheduler·Operator·is·Enabled</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-e | 55 | ········<ocil:test_action_ref>ocil:ssg-kube_descheduler_lifecycle_policy_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_eviction_thresholds_set_hard_nodefs_inodesfree_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-api_server_service_account_public_key_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Configure·the·Service·Account·Public·Key·for·the·API·Server</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-api_server_service_account_public_key_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_ovs_vswitchd_pid_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-machine_volume_encrypted_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·that·full·disk·encryption·is·configured·on·cluster·nodes</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-machine_volume_encrypted_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_ovs_conf_db_lock_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policies_hypershift_hosted_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·that·HyperShift·Hosted·Namespaces·have·Network·Policies·defined.</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-fi | 73 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policies_hypershift_hosted_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-routes_rate_limit_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Ensure·that·all·Routes·has·rate·limit·enabled</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-routes_rate_limit_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-accounts_unique_service_account_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-project_template_network_policy_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Ensure·that·project·templates·autocreate·Network·Policies</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-project_template_network_policy_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-image_pruner_active_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Configure·ImagePruner·so·that·images·that·are·no·longer·needed·are·automatically·removed</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-image_pruner_active_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-o | 94 | ····<ocil:questionnaire·id="ocil:ssg-ocp_insecure_registries_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Check·if·any·insecure·registry·sources·is·configured</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-o | 97 | ········<ocil:test_action_ref>ocil:ssg-ocp_insecure_registries_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_per | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_ovs_conf_db_not_s390x_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Verify· | 101 | ······<ocil:title>Verify·Group·Who·Owns·The·Open·vSwitch·Configuration·Database</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-file_per | 103 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_ovs_conf_db_not_s390x_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-api_server_api_priority_v1alpha1_flowschema_catch_all_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_groupowner_permissions_pod_logs_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Kubernetes·Pod·Logs·Must·Be·Owned·and·Group·Owned·By·Root·and·have·permissions·755</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-file_owner_groupowner_permissions_pod_logs_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-api_server_tls_private_key_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Configure·the·Certificate·Key·for·the·API·Server</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-api_server_tls_private_key_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_scheduler_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Verify·Permissions·on·the·Kubernetes·Scheduler·Pod·Specification·File</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_scheduler_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 847793/861186 bytes (98.44%) of diff not shown. | |||
| Offset 72, 197 lines modified | Offset 72, 197 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="ocp4-on-sdn"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="ocp4-node | 79 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="not_ | 85 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 95 | ········ | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> |
| 96 | ········ | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | 89 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 90 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 91 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7"> |
| 104 | ······<cpe-lang:logical-test·operator=" | 92 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 109 | ······</cpe-lang:logical-test> | 95 | ······</cpe-lang:logical-test> |
| 110 | ····</cpe-lang:platform> | 96 | ····</cpe-lang:platform> |
| 111 | ····<cpe-lang:platform·id=" | 97 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> |
| 112 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 98 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_o | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id="ocp4- | 102 | ····<cpe-lang:platform·id="ocp4-on-azure"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-n | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> |
| 119 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id=" | 107 | ····<cpe-lang:platform·id="ocp4-node-on-ovn"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ········ | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-ovn:def:1"/> |
| 125 | ········</cpe-lang:logical-test> | ||
| 126 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="ocp4-no | 112 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_no | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="ocp4-on-gcp"> | 117 | ····<cpe-lang:platform·id="ocp4-on-gcp"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 140 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> | ||
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="ocp4.16"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_16:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | ||
| 152 | ····</cpe-lang:platform> | ||
| 153 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | 122 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 154 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="ocp4-on-hypershift"> | 129 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | ||
| 163 | ······</cpe-lang:logical-test> | ||
| 164 | ····</cpe-lang:platform> | ||
| 165 | ····<cpe-lang:platform·id="ocp4-on-aws"> | ||
| 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 133 | ········</cpe-lang:logical-test> | ||
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 168 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id=" | 137 | ····<cpe-lang:platform·id="ocp4-on-sdn"> |
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_nod | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id="ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15"> | 142 | ····<cpe-lang:platform·id="ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15"> |
| 177 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 178 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_11:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_11:def:1"/> |
| 179 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> |
| 183 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 184 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="ocp4-on-aws"> | ||
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_aws:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | ||
| 155 | ····</cpe-lang:platform> | ||
| 185 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> | 156 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 186 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 187 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 188 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| Max diff block lines reached; 12878/26599 bytes (48.42%) of diff not shown. | |||
| Offset 3, 3977 lines modified | Offset 3, 3977 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_grub2_cfg_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·Group·Ownership</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-coredump_disable_storage_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Disable·storing·core·dump</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-coredump_disable_storage_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Accepting·ICMP·Redirects·for·All·IPv4·Interfaces</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-grub2_disable_recovery_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Recovery·Booting</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-grub2_disable_recovery_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_idle_timeout_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Set·SSH·Client·Alive·Interval</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_idle_timeout_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_grub2_cfg_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·User·Ownership</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_grub2_cfg_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Verify·/boot/grub2/grub.cfg·Permissions</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_grub2_cfg_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-seli | 52 | ····<ocil:questionnaire·id="ocil:ssg-sudoers_explicit_command_args_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>E | 53 | ······<ocil:title>Explicit·arguments·in·sudo·specifications</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-seli | 55 | ········<ocil:test_action_ref>ocil:ssg-sudoers_explicit_command_args_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_dccp_disabled_ocil:questionnaire:1"> | ||
| 59 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-accounts_logon_fail_delay_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·the·Logon·Failure·Delay·is·Set·Correctly·in·login.defs</ocil:title> | ||
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-accounts_logon_fail_delay_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-package_gnutls-utils_installed_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_retry_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·PAM·Enforces·Password·Requirements·-·Authentication·Retry·Prompts·Permitted·Per-Session</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_retry_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_defaultnetstreamdriver_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-no_direct_root_logins_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Direct·root·Logins·Not·Allowed</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-no_direct_root_logins_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_password_auth_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_passwd_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Verify·User·Who·Owns·passwd·File</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_ocil:questionnaire:1"> | ||
| 83 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> | ||
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_log_audit_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Ensure·/var/log/audit·Located·On·Separate·Partition</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Verify·Group·Who·Owns·/var/log·Directory</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-a | 106 | ····<ocil:questionnaire·id="ocil:ssg-account_use_centralized_automated_auth_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>C | 107 | ······<ocil:title>Use·Centralized·and·Automated·Authentication</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-a | 109 | ········<ocil:test_action_ref>ocil:ssg-account_use_centralized_automated_auth_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-auditd_local_events_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Include·Local·Events·in·Audit·Logs</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-auditd_local_events_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| Max diff block lines reached; 905195/917647 bytes (98.64%) of diff not shown. | |||
| Offset 71, 226 lines modified | Offset 71, 226 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="wifi-iface"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="system_with_kernel"> | 83 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 87 | ········</cpe-lang:logical-test> | ||
| 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 93 | ····<cpe-lang:platform·id="not_bootc"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 98 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_ | 103 | ····<cpe-lang:platform·id="package_postfix"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_ | 108 | ····<cpe-lang:platform·id="package_dnf"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | ||
| 108 | ····</cpe-lang:platform> | ||
| 109 | ····<cpe-lang:platform·id="not_bootc"> | ||
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 111 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 112 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ | 113 | ····<cpe-lang:platform·id="package_snmpd_and_system_with_kernel"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_snmpd:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 119 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 120 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | ||
| 124 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="package_rs | 125 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_rs | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id=" | 130 | ····<cpe-lang:platform·id="package_bash"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 130 | ········</cpe-lang:logical-test> | ||
| 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········ | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 133 | ········</cpe-lang:logical-test> | ||
| 134 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="not_ | 135 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 140 | ········</cpe-lang:logical-test> | 139 | ········</cpe-lang:logical-test> |
| 141 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 142 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 143 | ········</cpe-lang:logical-test> | 142 | ········</cpe-lang:logical-test> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 150 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 156 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="package_systemd"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="package_ | 168 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 172 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 173 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_ | 174 | ····<cpe-lang:platform·id="package_iptables"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | 177 | ······</cpe-lang:logical-test> |
| 177 | ····</cpe-lang:platform> | 178 | ····</cpe-lang:platform> |
| 178 | ····<cpe-lang:platform·id=" | 179 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 182 | ······</cpe-lang:logical-test> | 182 | ······</cpe-lang:logical-test> |
| 183 | ····</cpe-lang:platform> | 183 | ····</cpe-lang:platform> |
| Max diff block lines reached; 706362/721335 bytes (97.92%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 15 lines modified | Offset 35, 15 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2025-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 44 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 112, 172 lines modified | Offset 112, 172 lines modified | ||
| 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 112 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 113 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 114 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 115 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id=" | 119 | ········<cpe-lang:platform·id="wifi-iface"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 122 | ··········</cpe-lang:logical-test> | 122 | ··········</cpe-lang:logical-test> |
| 123 | ········</cpe-lang:platform> | 123 | ········</cpe-lang:platform> |
| 124 | ········<cpe-lang:platform·id=" | 124 | ········<cpe-lang:platform·id="not_aarch64_arch"> |
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 127 | ··········</cpe-lang:logical-test> | ||
| 128 | ········</cpe-lang:platform> | ||
| 129 | ········<cpe-lang:platform·id="package_dnf"> | ||
| 125 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 127 | ··········</cpe-lang:logical-test> | 132 | ··········</cpe-lang:logical-test> |
| 128 | ········</cpe-lang:platform> | 133 | ········</cpe-lang:platform> |
| 129 | ········<cpe-lang:platform·id="package_ | 134 | ········<cpe-lang:platform·id="package_rsyslog"> |
| 130 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 132 | ··········</cpe-lang:logical-test> | 137 | ··········</cpe-lang:logical-test> |
| 133 | ········</cpe-lang:platform> | 138 | ········</cpe-lang:platform> |
| 134 | ········<cpe-lang:platform·id="package_ | 139 | ········<cpe-lang:platform·id="package_bash"> |
| 135 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 137 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 138 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 139 | ········<cpe-lang:platform·id=" | 144 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 142 | ··········</cpe-lang:logical-test> | 148 | ··········</cpe-lang:logical-test> |
| 143 | ········</cpe-lang:platform> | 149 | ········</cpe-lang:platform> |
| 144 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 150 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 153 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 148 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 149 | ··········</cpe-lang:logical-test> | 155 | ··········</cpe-lang:logical-test> |
| 150 | ········</cpe-lang:platform> | 156 | ········</cpe-lang:platform> |
| 151 | ········<cpe-lang:platform·id=" | 157 | ········<cpe-lang:platform·id="package_iptables"> |
| 152 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 153 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 154 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 155 | ············</cpe-lang:logical-test> | ||
| 156 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 157 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 158 | ············</cpe-lang:logical-test> | ||
| 159 | ··········</cpe-lang:logical-test> | ||
| 160 | ········</cpe-lang:platform> | ||
| 161 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 162 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 165 | ············</cpe-lang:logical-test> | ||
| 166 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 167 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 168 | ············</cpe-lang:logical-test> | ||
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 170 | ··········</cpe-lang:logical-test> | 160 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 161 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id="package_bash"> | ||
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 175 | ··········</cpe-lang:logical-test> | ||
| 176 | ········</cpe-lang:platform> | ||
| 177 | ········<cpe-lang:platform·id=" | 162 | ········<cpe-lang:platform·id="ipv6_enabled"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> | ||
| 180 | ··········</cpe-lang:logical-test> | ||
| 181 | ········</cpe-lang:platform> | ||
| 182 | ········<cpe-lang:platform·id="wifi-iface"> | ||
| 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-i | 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 185 | ··········</cpe-lang:logical-test> | 165 | ··········</cpe-lang:logical-test> |
| 186 | ········</cpe-lang:platform> | 166 | ········</cpe-lang:platform> |
| 187 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | 167 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 190 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 170 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 191 | ··········</cpe-lang:logical-test> | 171 | ··········</cpe-lang:logical-test> |
| 192 | ········</cpe-lang:platform> | 172 | ········</cpe-lang:platform> |
| 193 | ········<cpe-lang:platform·id=" | 173 | ········<cpe-lang:platform·id="uefi"> |
| 194 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_ | 175 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 197 | ··········</cpe-lang:logical-test> | 176 | ··········</cpe-lang:logical-test> |
| 198 | ········</cpe-lang:platform> | 177 | ········</cpe-lang:platform> |
| 199 | ········<cpe-lang:platform·id="package_ntp"> | 178 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 200 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 1014325/1027688 bytes (98.70%) of diff not shown. | |||
| Offset 3, 3061 lines modified | Offset 3, 3061 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_sctp_disabled_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Disable·SCTP·Support</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-kernel_module_sctp_disabled_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_motd_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 11 | ······<ocil:title>Verify·Group·Ownership·of·Message·of·the·Day·Banner</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_motd_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_lcredit_ocil:questionnaire:1"> | ||
| 23 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_log_martians_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Enable·Kernel·Paremeter·to·Log·Martian·Packets·on·all·IPv4·Interfaces·by·Default</ocil:title> | ||
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_log_martians_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_allow_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Verify· | 23 | ······<ocil:title>Verify·User·Who·Owns·/etc/cron.allow·file</ocil:title> |
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-file_ | 25 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_allow_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-gid_passwd_group_same_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>All·GIDs·referenced·in·/etc/passwd·must·be·defined·in·/etc/group</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-gid_passwd_group_same_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-a | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_allow_only_protocol2_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Allow·Only·SSH·Protocol·2</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_allow_only_protocol2_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_enforce_root_ocil:questionnaire:1"> | ||
| 47 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_opasswd_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/security/opasswd</ocil:title> | ||
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_opasswd_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-file_ | 49 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_group_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>Verify·User·Who·Owns·group·File</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_group_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_weekly_ocil:questionnaire:1"> | ||
| 65 | ···· | 58 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Ensure·SMAP·is·not·disabled·during·boot</ocil:title> | ||
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmap_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_umask_etc_bashrc_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 65 | ······<ocil:title>Ensure·the·Default·Bash·Umask·is·Set·Correctly</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_umask_etc_bashrc_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_ | 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>Enable·PAM</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_ | 73 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Enable·SSH·Warning·Banner</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_warning_banner_net_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-package_ypserv_removed_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Uninstall·ypserv·Package</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-package_ypserv_removed_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-grub2_uefi_password_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>U | 89 | ······<ocil:title>Set·the·UEFI·Boot·Loader·Password</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-grub2_uefi_password_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 101 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_loglevel_verbose_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Set·SSH·Daemon·LogLevel·to·VERBOSE</ocil:title> | ||
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sshd_set_loglevel_verbose_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-service_dhcpd_disabled_ocil:questionnaire:1"> | ||
| 107 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_removexattr_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Record·Successful·Permission·Changes·to·Files·-·removexattr</ocil:title> | ||
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-se | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_removexattr_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-ntpd_configure_restrictions_ocil:questionnaire:1"> | ||
| 113 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_yama_ptrace_scope_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Restrict·usage·of·ptrace·to·descendant·processes</ocil:title> | ||
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_yama_ptrace_scope_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_x11_forwarding_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Disable·X11·Forwarding</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| Max diff block lines reached; 531801/543952 bytes (97.77%) of diff not shown. | |||
| Offset 71, 172 lines modified | Offset 71, 172 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="wifi-iface"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="package_dnf"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="package_ | 98 | ····<cpe-lang:platform·id="package_bash"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 101 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 102 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 103 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 109 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="package_iptables"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 117 | ········</cpe-lang:logical-test> | ||
| 118 | ······</cpe-lang:logical-test> | ||
| 119 | ····</cpe-lang:platform> | ||
| 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 127 | ········</cpe-lang:logical-test> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_bash"> | ||
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | ||
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-i | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | 126 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 132 | ····<cpe-lang:platform·id="uefi"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="package_ntp"> | 137 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 141 | ········</cpe-lang:logical-test> | ||
| 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 144 | ········</cpe-lang:logical-test> | ||
| 161 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_pam"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld_and_system_with_kernel"> | 157 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 178 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 179 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 180 | ····<cpe-lang:platform·id=" | 164 | ····<cpe-lang:platform·id="non-uefi"> |
| 181 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 183 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_ | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> |
| 184 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 185 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 186 | ····<cpe-lang:platform·id="package_d | 169 | ····<cpe-lang:platform·id="package_audit"> |
| Max diff block lines reached; 431560/444512 bytes (97.09%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-opensuse-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-opensuse-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2025-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-cpe-dictionary.xml"·timestamp="2025-03-01T22:08:00"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:15.0"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·15.0</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap15:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.1"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.1</cpe-dict:title> |
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:opensuse:leap:42.3"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">openSUSE·Leap·42.3</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml">oval:ssg-installed_OS_is_opensuse_leap42:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2025-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-opensuse-xccdf.xml"·timestamp="2025-03-01T22:08:00"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> | 48 | ······<xccdf-1.2:status·date="2025-03-01">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 52 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| Offset 116, 163 lines modified | Offset 116, 163 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 126 | ··········</cpe-lang:logical-test> | ||
| 127 | ········</cpe-lang:platform> | ||
| 123 | ········<cpe-lang:platform·id="package_ | 128 | ········<cpe-lang:platform·id="package_postfix"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id=" | 133 | ········<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 134 | ··········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 136 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 137 | ··········</cpe-lang:logical-test> | ||
| 138 | ········</cpe-lang:platform> | ||
| 139 | ········<cpe-lang:platform·id="package_rsyslog"> | ||
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 141 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 142 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 143 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id=" | 144 | ········<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 145 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 147 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 148 | ············</cpe-lang:logical-test> | ||
| 149 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 150 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 151 | ············</cpe-lang:logical-test> | ||
| 136 | ··········</cpe-lang:logical-test> | 152 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 153 | ········</cpe-lang:platform> |
| 138 | ········<cpe-lang:platform·id=" | 154 | ········<cpe-lang:platform·id="x86_64_arch"> |
| 139 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 157 | ··········</cpe-lang:logical-test> | ||
| 158 | ········</cpe-lang:platform> | ||
| 159 | ········<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 160 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 161 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 140 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 141 | ··········</cpe-lang:logical-test> | 163 | ··········</cpe-lang:logical-test> |
| 142 | ········</cpe-lang:platform> | 164 | ········</cpe-lang:platform> |
| 143 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 165 | ········<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 144 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 146 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 148 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 149 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 150 | ········<cpe-lang:platform·id="package_ | 172 | ········<cpe-lang:platform·id="package_systemd"> |
| 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 153 | ··········</cpe-lang:logical-test> | 175 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 176 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id=" | 177 | ········<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 159 | ············</cpe-lang:logical-test> | ||
| 160 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 161 | ············ | 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 162 | ············< | 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 163 | ··········</cpe-lang:logical-test> | 181 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 182 | ········</cpe-lang:platform> |
| 183 | ········<cpe-lang:platform·id="package_iptables"> | ||
| 184 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 185 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 186 | ··········</cpe-lang:logical-test> | ||
| 187 | ········</cpe-lang:platform> | ||
| 165 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw | 188 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 189 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 190 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 168 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 191 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 169 | ············</cpe-lang:logical-test> | 192 | ············</cpe-lang:logical-test> |
| 170 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | 193 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 171 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 194 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 172 | ············</cpe-lang:logical-test> | 195 | ············</cpe-lang:logical-test> |
| 173 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 174 | ··········</cpe-lang:logical-test> | 196 | ··········</cpe-lang:logical-test> |
| 175 | ········</cpe-lang:platform> | 197 | ········</cpe-lang:platform> |
| 176 | ········<cpe-lang:platform·id="aa | 198 | ········<cpe-lang:platform·id="package_shadow-utils"> |
| 177 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 199 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 200 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 179 | ··········</cpe-lang:logical-test> | 201 | ··········</cpe-lang:logical-test> |
| 180 | ········</cpe-lang:platform> | 202 | ········</cpe-lang:platform> |
| 181 | ········<cpe-lang:platform·id=" | 203 | ········<cpe-lang:platform·id="package_logrotate"> |
| 182 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 204 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 205 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| Max diff block lines reached; 1185001/1197845 bytes (98.93%) of diff not shown. | |||
| Offset 3, 2209 lines modified | Offset 3, 2209 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-grub2_l1tf_argument_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Configure·L1·Terminal·Fault·mitigations</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-grub2_l1tf_argument_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_timeout_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Kernel·panic·timeout</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_timeout_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_file_deletion_events_renameat_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Ensure·auditd·Collects·File·Deletion·Events·by·User·-·renameat</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_file_deletion_events_renameat_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-p | 34 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Configure·System·to·Forward·All·Mail·For·The·Root·Account</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-p | 37 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-no_direct_root_logins_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Direct·root·Logins·Not·Allowed</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-no_direct_root_logins_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_polyinstantiated_var_tmp_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_umount2_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·umount2</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-a | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_umount2_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Configure·Speculative·Store·Bypass·Mitigation</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-grub2_spec_store_bypass_disable_argument_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_seccomp_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Enable· | 59 | ······<ocil:title>Enable·seccomp·to·safely·compute·untrusted·bytecode</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_seccomp_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-package_syslogng_installed_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>En | 65 | ······<ocil:title>Ensure·syslog-ng·is·Installed</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-package_syslogng_installed_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_gshadow_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Verify·Group·Who·Owns·gshadow·File</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_audit_configuration_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Audit·Configuration·Files·Permissions·are·640·or·More·Restrictive</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_audit_configuration_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_var_log_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Verify· | 83 | ······<ocil:title>Verify·User·Who·Owns·/var/log·Directory</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-file_owner_var_log_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_fchmodat_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Enable·systemd-journald·Service</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-service_systemd-journald_enabled_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_action_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-package_ntp_installed_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Install·the·ntp·service</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-package_ntp_installed_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-au | 100 | ····<ocil:questionnaire·id="ocil:ssg-accounts_root_path_dirs_no_write_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Ensure· | 101 | ······<ocil:title>Ensure·that·Root's·Path·Does·Not·Include·World·or·Group-Writable·Directories</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-au | 103 | ········<ocil:test_action_ref>ocil:ssg-accounts_root_path_dirs_no_write_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-no_empty_passwords_etc_shadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure· | 107 | ······<ocil:title>Ensure·There·Are·No·Accounts·With·Blank·or·Null·Passwords</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-no_empty_passwords_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_stime_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Record·Attempts·to·Alter·Time·Through·stime</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_stime_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_bug_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-file_ownership_sshd_private_key_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Verify·Ownership·on·SSH·Server·Private·*_key·Key·Files</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-file_ownership_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 123 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_randomize_base_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 645491/658075 bytes (98.09%) of diff not shown. | |||
| Offset 71, 163 lines modified | Offset 71, 163 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 78 | ····<cpe-lang:platform·id="package_ | 83 | ····<cpe-lang:platform·id="package_postfix"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 88 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 89 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="package_rsyslog"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 103 | ········</cpe-lang:logical-test> | ||
| 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 106 | ········</cpe-lang:logical-test> | ||
| 91 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> | ||
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 96 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> | 120 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="package_ | 127 | ····<cpe-lang:platform·id="package_systemd"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_systemd:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 132 | ····<cpe-lang:platform·id="package_ufw_and_system_with_kernel"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 117 | ········< | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 138 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | ||
| 142 | ····</cpe-lang:platform> | ||
| 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw | 143 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | 147 | ········</cpe-lang:logical-test> |
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | 150 | ········</cpe-lang:logical-test> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="aa | 153 | ····<cpe-lang:platform·id="package_shadow-utils"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_shadow-utils:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id=" | 158 | ····<cpe-lang:platform·id="package_logrotate"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="machine"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_gdm"> | 168 | ····<cpe-lang:platform·id="package_gdm"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_ | 173 | ····<cpe-lang:platform·id="package_pam"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 176 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 177 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="package_ | 178 | ····<cpe-lang:platform·id="package_audit"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 181 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 182 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 183 | ····<cpe-lang:platform·id="system_with_kernel"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 184 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | 185 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 186 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 187 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | ||
| 168 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| Max diff block lines reached; 479548/493385 bytes (97.20%) of diff not shown. | |||
| Offset 71, 353 lines modified | Offset 71, 353 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="os_linux_rhel_gt_or_eq_8_7_and_os_linux_rhel_ne_9_0"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_ne_9_0:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="wifi-iface"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw_and_system_with_kernel"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="package_sssd"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_sssd:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 104 | ····<cpe-lang:platform·id="not_bootc"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-bootc:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="not_aarch64_arch"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 112 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 113 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 114 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 117 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 118 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 119 | ····<cpe-lang:platform·id="package_postfix"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 118 | ········</cpe-lang:logical-test> | ||
| 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> |
| 120 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 121 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 122 | ····<cpe-lang:platform·id=" | 124 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 123 | ······<cpe-lang:logical-test·operator=" | 125 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 125 | ······</cpe-lang:logical-test> | 128 | ······</cpe-lang:logical-test> |
| 126 | ····</cpe-lang:platform> | 129 | ····</cpe-lang:platform> |
| 127 | ····<cpe-lang:platform·id="package_ | 130 | ····<cpe-lang:platform·id="package_rsyslog"> |
| 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_rsyslog:def:1"/> |
| 130 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 131 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="package_tm | 135 | ····<cpe-lang:platform·id="package_autofs_and_system_with_kernel"> |
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_t | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_autofs:def:1"/> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="rhcos4-rhel9"> |
| 138 | ······<cpe-lang:logical-test·operator=" | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="package_bash"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_rhel_gt_or_eq_8_7:def:1"/> | ||
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id=" | 151 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 152 | ········<cpe-lang | 155 | ········</cpe-lang:logical-test> |
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-sys | 157 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | ||
| 154 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 165 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id=" | 166 | ····<cpe-lang:platform·id="grub2_and_system_with_kernel"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="package_ | 172 | ····<cpe-lang:platform·id="package_iptables_and_service_disabled_firewalld_and_system_with_kernel"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-system_with_kernel:def:1"/> | ||
| 169 | ······</cpe-lang:logical-test> | 177 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 178 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 179 | ····<cpe-lang:platform·id="mount_tmp"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 174 | ········ | 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_tmp:def:1"/> |
| 175 | ········</cpe-lang:logical-test> | ||
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 178 | ········</cpe-lang:logical-test> | ||
| 179 | ······</cpe-lang:logical-test> | 182 | ······</cpe-lang:logical-test> |
| 180 | ····</cpe-lang:platform> | 183 | ····</cpe-lang:platform> |
| 181 | ····<cpe-lang:platform·id="not_ | 184 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_ppc64le_arch_and_system_with_kernel"> |
| 182 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 185 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 183 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 186 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 184 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 187 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| Max diff block lines reached; 37475/53212 bytes (70.43%) of diff not shown. | |||
| Offset 3, 11108 lines modified | Offset 3, 10772 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-dir_permissions_library_dirs_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify· | 11 | ······<ocil:title>Verify·that·Shared·Library·Directories·Have·Restrictive·Permissions</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-dir_permissions_library_dirs_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_sshd_config_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Verify·Owner·on·SSH·Server·config·file</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-file_owner_sshd_config_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_pwhistory_remember_system_auth_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_home_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·/home·Located·On·Separate·Partition</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-partition_for_home_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-s | 28 | ····<ocil:questionnaire·id="ocil:ssg-dir_perms_world_writable_root_owned_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 29 | ······<ocil:title>Ensure·All·World-Writable·Directories·Are·Owned·by·root·User</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-s | 31 | ········<ocil:test_action_ref>ocil:ssg-dir_perms_world_writable_root_owned_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_max_log_file_action_stig_ocil:questionnaire:1"> | ||
| 35 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_unix_rounds_system_auth_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Set·number·of·Password·Hashing·Rounds·-·system-auth</ocil:title> | ||
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-a | 37 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_pam_unix_rounds_system_auth_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-sebool_logging_syslogd_use_tty_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_renameat_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Successful·Delete·Attempts·to·Files·-·renameat</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-se | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_renameat_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-no_host_based_files_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Remove·Host-Based·Authentication·Files</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-no_host_based_files_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_weekly_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Verify·Owner·on·cron.weekly</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_weekly_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-set_password_hashing_algorithm_logindefs_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_interactive_home_directory_defined_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>All·Interactive·Users·Must·Have·A·Home·Directory·Defined</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_user_interactive_home_directory_defined_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_sudo_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_semanage_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Record·Any·Attempts·to·Run·semanage</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_semanage_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-s | 82 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Enable· | 83 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-s | 85 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfiles_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Record· | 89 | ······<ocil:title>Record·Any·Attempts·to·Run·setfiles</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_ | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setfiles_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_redirects_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-sebool_abrt_handle_event_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·the·abrt_handle_event·SELinux·Boolean</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-s | 97 | ········<ocil:test_action_ref>ocil:ssg-sebool_abrt_handle_event_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-package_openssh-server_installed_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Install·the·OpenSSH·Server·Package</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-package_openssh-server_installed_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-sebool_logging_syslogd_can_sendmail_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_truncate_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Record·Successful·Access·Attempts·to·Files·-·truncate</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_truncate_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_group_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Verify·User·Who·Owns·Backup·group·File</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-a | 118 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_chown_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·chown</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-a | 121 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_chown_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 1556305/1569118 bytes (99.18%) of diff not shown. | |||
| Offset 3, 6768 lines modified | Offset 3, 6669 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.76</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> | 7 | ····<ocil:timestamp>2025-03-01T08:08:00</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-package_nftables_installed_ocil:questionnaire:1"> |
| 11 | ······<ocil:title> | 11 | ······<ocil:title>Install·nftables·Package</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-package_nftables_installed_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_immutable_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Make·the·auditd·Configuration·Immutable</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_immutable_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-service_dovecot_disabled_ocil:questionnaire:1"> | ||
| 23 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_set_max_life_existing_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Set·Existing·Passwords·Maximum·Age</ocil:title> | ||
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-s | 25 | ········<ocil:test_action_ref>ocil:ssg-accounts_password_set_max_life_existing_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-accounts_user_dot_no_world_writable_programs_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-mount_option_dev_shm_nosuid_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Add·nosuid·Option·to·/dev/shm</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-mount_option_dev_shm_nosuid_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-gr | 40 | ····<ocil:questionnaire·id="ocil:ssg-group_unique_id_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>E | 41 | ······<ocil:title>Ensure·All·Groups·on·the·System·Have·Unique·Group·ID</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-gr | 43 | ········<ocil:test_action_ref>ocil:ssg-group_unique_id_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_tally2_file_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>E | 47 | ······<ocil:title>SLEM·5·must·use·the·default·pam_tally2·tally·directory.</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-accounts_passwords_pam_tally2_file_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_max_concurrent_login_sessions_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-chronyd_specify_remote_server_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_shadow_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Verify·Permissions·on·shadow·File</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-dir_system_commands_group_root_owned_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_setxattr_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·setxattr</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-di | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_setxattr_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_print_last_log_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>En | 71 | ······<ocil:title>Enable·SSH·Print·Last·Log</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-sshd_print_last_log_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 76 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_passwd_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>Verify·User·Who·Owns·passwd·File</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-file_ | 79 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_passwd_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chcon_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Record·Any·Attempts·to·Run·chcon</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_chcon_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-libs_installed_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_kernel_kptr_restrict_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Restrict·Exposed·Kernel·Pointer·Addresses·Access</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_kernel_kptr_restrict_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-gnome_gdm_disable_unattended_automatic_login_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permission_user_init_files_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Ensure·All·User·Initialization·Files·Have·Mode·0740·Or·Less·Permissive</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permission_user_init_files_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_chmod_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv6_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_all_shadowed_sha512_ocil:questionnaire:1"> | ||
| 107 | ···· | 106 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Enable·PAM</ocil:title> | ||
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-s | 112 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_use_pty_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 113 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·use_pty</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-s | 115 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_use_pty_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_gshadow_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-account_temp_expire_date_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Assign·Expiration·Date·to·Temporary·Accounts</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| Max diff block lines reached; 992140/1004472 bytes (98.77%) of diff not shown. | |||